The do_pages_move function in mm/migrate.c in the Linux kernel before
2.6.33-rc7 does not validate node values, which allows local users to read
arbitrary kernel memory locations, cause a denial of service (OOPS), and
possibly have unspecified other impact by specifying a node that is not
part of the kernel's node set.
kees> Introduced in 2.6.18.
Updated: 2015-07-15 19:33:31 UTC (commit 9690)