CVE-2017-16994

CVE-2017-16994 is a Linux kernel vulnerability affecting versions before 4.14.2, where a flaw in the walk_hugetlb_range function allows local users to disclose sensitive information. Specifically, crafted use of the mincore() system call can expose uninitialized kernel memory. This is a medium-severity vulnerability (CVSS 5.5) with a local attack vector and low attack complexity, primarily impacting confidentiality. While not observed in active exploitation (KEV: No), proof-of-concept exploit code is publicly available on ExploitDB, though there is minimal community discussion or media coverage.