MNBSD-2021-4: Virtual memory stale mapping information disclosure via copy-on-write

Severity: Unknown

Affected Package: kernel

Summary: Virtual memory stale mapping information disclosure via copy-on-write

Description

A particular case of memory sharing was mishandled in the virtual memory system. When multiple descendant processes share a mapping that shadows memory of an ancestor process, the copy-on-write logic could fail to invalidate other mappings of the source page, leaving stale mappings even after the pages were reused for another purpose. An unprivileged local user could exploit this to read private data belonging to other processes or the kernel.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

Additional Information

Aliases: CVE-2021-29626

Published: April 06, 2021
Last Modified: April 06, 2021