Internet threat level: 1
Home→Descriptions→SA49191
Linux Kernel Huge Pages Memory Leak Denial of Service Vulnerability
| Secunia ID | |
| CVE-ID | |
| Release Date |
24 May 2012 |
| Last Change |
11 Jun 2012 |
| Criticality | |
| Solution Status |
Unpatched |
| Where | |
| Impact |
DoS (Denial of Service)This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system. |
| Description |
A vulnerability has been reported in Linux Kernel, which can be exploited by malicious, local users to cause a DoS (Denial of Service). The vulnerability is caused due to a memory leak within the handling of huge pages and can be exploited to exhaust available memory resulting in various processes being terminated and a kernel panic. Successful exploitation requires the kernel to be configured with the CONFIG_HUGETLB_PAGE feature. |
| Solution |
Restrict access to trusted users only. |
| Reported by |
Christoph Lameter |
| Original Advisory |
Christoph Lameter: |
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.