Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information from uninitialized stack data by triggering failure of a certain bitmap operation.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7616.json"
[
{
"signature_type": "Function",
"target": {
"file": "mm/mempolicy.c",
"function": "COMPAT_SYSCALL_DEFINE6"
},
"deprecated": false,
"id": "CVE-2017-7616-4762b045",
"signature_version": "v1",
"digest": {
"function_hash": "122260246748361969899284658227738903895",
"length": 552.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
},
{
"signature_type": "Function",
"target": {
"file": "mm/mempolicy.c",
"function": "COMPAT_SYSCALL_DEFINE3"
},
"deprecated": false,
"id": "CVE-2017-7616-c26c824b",
"signature_version": "v1",
"digest": {
"function_hash": "208091664954247382339257169395179484332",
"length": 473.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
},
{
"signature_type": "Line",
"target": {
"file": "mm/mempolicy.c"
},
"deprecated": false,
"id": "CVE-2017-7616-ed96f45c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156340978229009077974814609164014307605",
"111071891064380355140653241353471808748",
"268545763766501450053727943610081026849",
"200369306932528647465569373311266156833",
"94273807806588027226469991585013874991",
"82280932461192256485755702250046020264",
"205437042441768513812023941895659352941",
"311899732245837849280634229685578602782",
"193270577209090228028954263073718230087",
"104484580117011527056244003130270017531",
"185228043601593244623090618799836840862",
"160221285867134152101216345312434520670",
"306055385650766730743913121993221234675",
"287741520776532855826876078937680420526",
"189168234611656656434251254019934261216",
"268545763766501450053727943610081026849",
"327967833713883021379229763735306383833",
"52393706949002542241366433818044699175",
"332958019175909564501314372042657640650",
"200125175933056951141217554795472281030",
"29750045778627418103413567837479242255",
"301222209035547972620816698728597320663",
"212754856033792367904066472198188899185",
"273205712846093062457252109787003601276",
"221859183457402767168071202209139249193",
"310671580596779586521224845042796350029"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7616.json"
[
{
"signature_type": "Line",
"target": {
"file": "mm/mempolicy.c"
},
"deprecated": false,
"id": "CVE-2017-7616-1dda69fb",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"156340978229009077974814609164014307605",
"111071891064380355140653241353471808748",
"268545763766501450053727943610081026849",
"200369306932528647465569373311266156833",
"94273807806588027226469991585013874991",
"82280932461192256485755702250046020264",
"205437042441768513812023941895659352941",
"311899732245837849280634229685578602782",
"193270577209090228028954263073718230087",
"104484580117011527056244003130270017531",
"185228043601593244623090618799836840862",
"160221285867134152101216345312434520670",
"306055385650766730743913121993221234675",
"287741520776532855826876078937680420526",
"189168234611656656434251254019934261216",
"268545763766501450053727943610081026849",
"327967833713883021379229763735306383833",
"52393706949002542241366433818044699175",
"332958019175909564501314372042657640650",
"200125175933056951141217554795472281030",
"29750045778627418103413567837479242255",
"301222209035547972620816698728597320663",
"212754856033792367904066472198188899185",
"273205712846093062457252109787003601276",
"221859183457402767168071202209139249193",
"310671580596779586521224845042796350029"
]
},
"source": "https://github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
},
{
"signature_type": "Function",
"target": {
"file": "mm/mempolicy.c",
"function": "COMPAT_SYSCALL_DEFINE3"
},
"deprecated": false,
"id": "CVE-2017-7616-853d49b4",
"signature_version": "v1",
"digest": {
"function_hash": "208091664954247382339257169395179484332",
"length": 473.0
},
"source": "https://github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
},
{
"signature_type": "Function",
"target": {
"file": "mm/mempolicy.c",
"function": "COMPAT_SYSCALL_DEFINE6"
},
"deprecated": false,
"id": "CVE-2017-7616-f5f25361",
"signature_version": "v1",
"digest": {
"function_hash": "122260246748361969899284658227738903895",
"length": 552.0
},
"source": "https://github.com/torvalds/linux/commit/cf01fb9985e8deb25ccf0ea54d916b8871ae0e62"
}
]