CyberRota Analysis
AI-GeneratedThe vulnerability allows unprivileged local users to access freed kernel memory due to improperly managed largepage shared memory objects during the sendfile(2) operation. This oversight can lead to privilege escalation, potentially allowing attackers to gain elevated access to system resources. Organizations using affected systems should prioritize remediation to safeguard against unauthorized access and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile(2) transmitted such an object with the SF_NOCACHE flag, it freed the underlying pages after transmission even though existing mappings still referred to them. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)