Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of huge pages can lead to memory corruption or information leaks. The issue arises in the 'copy_user_gigantic_page()' function, which requires addresses to be aligned with huge page sizes. However, the 'hugetlb_wp()' function currently passes fault addresses that may not be properly aligned. This misalignment can cause 'copy_user_large_folio()' to call 'copy_user_gigantic_page()' with an incorrect address, potentially leading to the mentioned consequences.
Exploitation of this vulnerability could result in memory corruption or unauthorized information disclosure.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.