CVE-2017-16994: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 2.1% chance of exploitation in the next 30 days.

The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

Affected products

• Linux Linux Kernel: before 4.14.2 (fixed in 4.14.2)

Published 2017-11-27. Last modified 2026-06-17.