Lucene search

K
redhatcveRedhat.comRH:CVE-2017-7889
HistoryApr 21, 2017 - 1:18 p.m.

CVE-2017-7889

2017-04-2113:18:42
redhat.com
access.redhat.com
13

0.0004 Low

EPSS

Percentile

5.1%

The mm subsystem in the Linux kernel through 4.10.10 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.