CVE-2017-15128: Buffer Overflow
A flaw was found in Linux kernel. A lack of size check in hugetlbmcopyatomicpte could cause denial of service.
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1e3921471354244f70fe268586ff94a97a6dd4df
References:
https://marc.info/?l=linux-mm&m=150819356125109
Other sources
A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13.12. A lack of size check could cause a denial of service (BUG).
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-15128?
CVE-2017-15128 is a vulnerability that was found in the hugetlb_mcopy_atomic_pte function in the Linux kernel before 4.13.12.
What is the severity of CVE-2017-15128?
The severity of CVE-2017-15128 is medium, with a severity value of 5.5.
How does CVE-2017-15128 affect the Linux kernel?
CVE-2017-15128 can cause a denial of service (BUG) due to a lack of size check in the hugetlb_mcopy_atomic_pte function.
Which software versions are affected by CVE-2017-15128?
Linux kernel versions before 4.13.12, Redhat Enterprise Linux 7.0, and Redhat Enterprise MRG 2.0 are affected by CVE-2017-15128.
How can I fix CVE-2017-15128?
To fix CVE-2017-15128, update your Linux kernel to version 4.13.12 or higher.