The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | 2008 for Itanium-Based Systems Service Pack 2 |