{
    "id": "CVE-2017-16994",
    "published": "2017-11-27 19:29:00",
    "last_modified": "2026-06-17 01:10:13",
    "cvss_score": "5.5",
    "cvss_severity": "MEDIUM",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
    "cwe": "CWE-200",
    "description": "The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.",
    "epss_score": "0.02084",
    "epss_percentile": "0.80970",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-07 18:17:15",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "linux",
            "product": "linux_kernel"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "44303",
            "title": "Linux Kernel 4.13 (Debian 9) - Local Privilege Escalation",
            "date": "2017-12-11",
            "url": "https://www.exploit-db.com/exploits/44303"
        },
        {
            "source": "exploit-db",
            "ref_id": "44304",
            "title": "Linux Kernel - 'mincore()' Heap Page Disclosure (PoC)",
            "date": "2017-12-11",
            "url": "https://www.exploit-db.com/exploits/44304"
        },
        {
            "source": "exploit-db",
            "ref_id": "43178",
            "title": "Linux Kernel - 'mincore()' Uninitialized Kernel Heap Page Disclosure",
            "date": "2017-11-24",
            "url": "https://www.exploit-db.com/exploits/43178"
        }
    ],
    "refs_list": [
        "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "http://www.securityfocus.com/bid/101969",
        "https://access.redhat.com/errata/RHSA-2018:0502",
        "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431",
        "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "https://usn.ubuntu.com/3617-1/",
        "https://usn.ubuntu.com/3617-2/",
        "https://usn.ubuntu.com/3617-3/",
        "https://usn.ubuntu.com/3619-1/",
        "https://usn.ubuntu.com/3619-2/",
        "https://usn.ubuntu.com/3632-1/",
        "https://www.exploit-db.com/exploits/43178/",
        "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.2",
        "http://www.securityfocus.com/bid/101969",
        "https://access.redhat.com/errata/RHSA-2018:0502",
        "https://bugs.chromium.org/p/project-zero/issues/detail?id=1431",
        "https://github.com/torvalds/linux/commit/373c4557d2aa362702c4c2d41288fb1e54990b7c",
        "https://usn.ubuntu.com/3617-1/",
        "https://usn.ubuntu.com/3617-2/",
        "https://usn.ubuntu.com/3617-3/",
        "https://usn.ubuntu.com/3619-1/",
        "https://usn.ubuntu.com/3619-2/",
        "https://usn.ubuntu.com/3632-1/"
    ]
}