The online_pages function in mm/memory_hotplug.c in the Linux kernel before
3.6 allows local users to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified other impact in
opportunistic circumstances by using memory that was hot-added by an
administrator.

A flaw was discovered in the Linux kernel's handling of new hot-plugged
memory. An unprivileged local user could exploit this flaw to cause a
denial of service by crashing the system.