Dave Hansen

2 exploits Active since Jun 2012

CVE-2012-2390 WRITEUP WRITEUP

Linux Kernel < 3.4.2 - Denial of Service via Invalid MAP_HUGETLB mmap Operations

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system crash) via invalid MAP_HUGETLB mmap operations.

View Code

CVE-2023-0459 WRITEUP MEDIUM WRITEUP

Linux Kernel < 4.14.307 - Information Disclosure via copy_from_user Access Bypass

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

CVSS 6.5

View Code