CVE-2017-15127: Medium severity linux kernel vulnerability
A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VMSHARED hugetlbfs mapping could trigger a local denial of service (BUG).
Other sources
A flaw was found in the Linux kernel where an additional implicit page unlock for VMSHARED hugetlbfs mapping could trigger local denial of service by crashing the kernel with the message:
page dumped because: VMBUGONPAGE(!PageLocked(page))
kernel BUG at mm/filemap.c:964! invalid opcode: 0000 [#1] SMP CPU: 1 PID: 22582 Comm: qemu-system-x86 Not tainted 4.11.11-300.fc26.x8664 #1 RIP: unlockpage+0x4a/0x50 Call Trace: hugetlbmcopyatomicpte+0xc0/0x320 mcopyatomic+0x96f/0xbe0 userfaultfdioctl+0x218/0xe90 dovfsioctl+0xa5/0x600 SySioctl+0x79/0x90 entrySYSCALL64fastpath+0x1a/0xa9
References:
https://marc.info/?l=linux-mm&m=150169274317930
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5af10dfd0afc559bb4b0f7e3e8227a1578333995
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-15127?
CVE-2017-15127 is a vulnerability found in the hugetlb_mcopy_atomic_pte function in the Linux kernel before 4.13.
How does CVE-2017-15127 impact Linux kernel?
CVE-2017-15127 could trigger a local denial of service (BUG) in the Linux kernel before 4.13.
Which software versions are affected by CVE-2017-15127?
Linux Kernel before version 4.13 and Redhat Enterprise Linux 7.0 and Redhat Enterprise MRG 2.0 are affected by CVE-2017-15127.
How severe is the vulnerability CVE-2017-15127?
The severity of CVE-2017-15127 is medium, with a CVSS base score of 5.5.
How can I fix CVE-2017-15127?
To fix CVE-2017-15127, users should update their Linux kernel to version 4.13 or later.