ID:6339 - Exploit for Out-of-bounds read in Linux kernel - CVE-2017-18344

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists due to out-of-bounds memory read error in the 'sigevent->sigev_notify' field of show_timer() function in the timer subsystem. A local attacker can obtain potentially sensitive information from system memory.

Remediation