vulnerability announce CVE-2010-0415

Linux kernel: memory reading via sys_move_pages

Synthesis of the vulnerability

A local attacker can use the move_pages() system call, in order to read kernel memory pages.

Severity: 1/4. Creation date: 08/02/2010.

Description of the vulnerability

The NUMA (Non-Uniform Memory Access) architecture is used on multi-processors systems, where each node has its own memory area. The move_pages() system call moves pages to another node:   move_pages(pid, nr_pages, address, nodes, ...); However, the nodes value is not checked. An attacker can therefore use a large value or a negative value, to force the kernel to move pages to a zone which can be read. A local attacker can thus use the move_pages() system call, in order to read kernel memory pages.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Linux kernel: memory reading via sys_move_pages. Keywords: Access Linux Memory NUMA Non-Uniform kernel memory move_pages nr_pages reading sys_move_pages. Identifiers: BID-38144, CVE-2010-0415, DSA-1996-1, DSA 2003-1, DSA 2004-1, FEDORA-2010-1787, FEDORA-2010-1804, MDVSA-2010:066, MDVSA-2010:067, RHSA-2010:0147-01, RHSA-2010:0161-01, SUSE-SA:2010:014, SUSE-SA:2010:016, SUSE-SA:2010:018, VIGILANCE-VUL-9417.

Information sources

Publications and announces

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer applications vulnerability