CyberRota Analysis
AI-GeneratedCertain system calls, such as open(2) with the O_TRUNC flag and fspacectl(2), improperly free memory in largepage objects, which should not be allowed. This vulnerability allows unprivileged local users to access freed kernel memory, potentially leading to privilege escalation. Organizations utilizing systems that implement these calls should prioritize addressing this issue to mitigate the risk of unauthorized access and privilege escalation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel memory. This can be exploited to escalate privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)