Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An exploitable vulnerability exists in the grsecurity PaX patch for the function read_kmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version v4.9.25-unofficialgrsec to v4.9.74-unofficialgrsec. PaX adds a temp buffer to the read_kmem function, which is never freed when an invalid address is supplied. This results in a memory leakage that can lead to a crash of the system. An attacker needs to induce a read to /dev/kmem using an invalid address to exploit this vulnerability.
CVSS Information
N/A
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Vulnerability Title
PaX和grsecurity 安全漏洞
Vulnerability Description
PaX和grsecurity中的grsecurity PaX补丁存在安全漏洞。攻击者可利用该漏洞造成系统崩溃（内存泄露）。以下产品及版本受到影响：PaX pax-linux-4.9.8-test1版本至4.9.24-test7；grsecurity official grsecurity-3.1-4.9.8-201702060653版本至grsecurity-3.1-4.9.24-201704252333版本，grsecurity unofficial 4.9.25-unofficialgrsec版本至4
CVSS Information
N/A
Vulnerability Type
N/A