| ID | CVE-2017-7889 | ||||||
| Sažetak | The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c. | ||||||
| Reference |
|
||||||
| CVSS |
|
||||||
| Pristup |
|
||||||
| Impact |
|
||||||
| CVSS vektor | AV:L/AC:L/Au:N/C:C/I:C/A:C | ||||||
| Zadnje važnije ažuriranje | 14-02-2023 - 21:12 | ||||||
| Objavljeno | 17-04-2017 - 00:59 |
