Lucene search

Veracode Vulnerability DatabaseVERACODE:18250

HistoryMay 02, 2019 - 6:36 a.m.

Information Disclosure

2019-05-0206:36:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Linux kernel is vulnerable to information disclosure. The vulnerability exists because of incorrect error handling in the set_mempolicy() and mbind() compat syscalls in ‘mm/mempolicy.c’ in the Linux kernel. Local users could obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.

CPENameOperatorVersion
kernel-rteq3.10.0__514.2.2.rt56.424.el7
kernel-rteq3.10.0__514.6.1.rt56.429.el7
kerneleq2.6.32__696.1.1.bgq.el6
kerneleq2.6.32__696.28.1.el6
kerneleq2.6.32__358.6.1.el6
kerneleq2.6.32__642.6.2.el6
kerneleq2.6.32__431.40.2.el6
kerneleq2.6.32__642.3.1.el6
kerneleq2.6.32__71.18.2.el6
kerneleq2.6.32__358.14.1.el6

Name	Operator	Version
kernel-rt	eq	3.10.0__514.2.2.rt56.424.el7
kernel-rt	eq	3.10.0__514.6.1.rt56.429.el7
kernel	eq	2.6.32__696.1.1.bgq.el6
kernel	eq	2.6.32__696.28.1.el6
kernel	eq	2.6.32__358.6.1.el6
kernel	eq	2.6.32__642.6.2.el6
kernel	eq	2.6.32__431.40.2.el6
kernel	eq	2.6.32__642.3.1.el6
kernel	eq	2.6.32__71.18.2.el6
kernel	eq	2.6.32__358.14.1.el6

Rows per page:

1-10 of 2601

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf01fb9985e8deb25ccf0ea54d916b8871ae0e62

www.securityfocus.com/bid/97527

www.securitytracker.com/id/1038503

access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html

access.redhat.com/errata/RHSA-2017:1842

access.redhat.com/errata/RHSA-2017:2077

access.redhat.com/errata/RHSA-2018:1854

access.redhat.com/security/cve/CVE-2016-10741

access.redhat.com/security/cve/CVE-2017-2584

access.redhat.com/security/cve/CVE-2017-5551

access.redhat.com/security/cve/CVE-2017-7495

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1377840

bugzilla.redhat.com/show_bug.cgi?id=1378172

bugzilla.redhat.com/show_bug.cgi?id=1389215

bugzilla.redhat.com/show_bug.cgi?id=1400188

bugzilla.redhat.com/show_bug.cgi?id=1414052

bugzilla.redhat.com/show_bug.cgi?id=1421801

bugzilla.redhat.com/show_bug.cgi?id=1421810

bugzilla.redhat.com/show_bug.cgi?id=1425780

bugzilla.redhat.com/show_bug.cgi?id=1426661

bugzilla.redhat.com/show_bug.cgi?id=1427626

bugzilla.redhat.com/show_bug.cgi?id=1427647

bugzilla.redhat.com/show_bug.cgi?id=1427991

bugzilla.redhat.com/show_bug.cgi?id=1428890

bugzilla.redhat.com/show_bug.cgi?id=1428943

bugzilla.redhat.com/show_bug.cgi?id=1429610

bugzilla.redhat.com/show_bug.cgi?id=1429640

bugzilla.redhat.com/show_bug.cgi?id=1429951

bugzilla.redhat.com/show_bug.cgi?id=1429977

bugzilla.redhat.com/show_bug.cgi?id=1430023

bugzilla.redhat.com/show_bug.cgi?id=1430038

bugzilla.redhat.com/show_bug.cgi?id=1430074

bugzilla.redhat.com/show_bug.cgi?id=1430353

bugzilla.redhat.com/show_bug.cgi?id=1430926

bugzilla.redhat.com/show_bug.cgi?id=1430946

bugzilla.redhat.com/show_bug.cgi?id=1431104

bugzilla.redhat.com/show_bug.cgi?id=1432118

bugzilla.redhat.com/show_bug.cgi?id=1434616

bugzilla.redhat.com/show_bug.cgi?id=1438512

bugzilla.redhat.com/show_bug.cgi?id=1441552

bugzilla.redhat.com/show_bug.cgi?id=1452240

bugzilla.redhat.com/show_bug.cgi?id=1459056

github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62

source.android.com/security/bulletin/2017-09-01

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for VERACODE:18250