PT-2017-2476 · Linux+5 · Linux Kernel+5
Geneblue
·
Publicado
2017-07-09
·
Atualizado
2025-09-29
·
CVE-2017-11176
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.11.9
Description
The issue is related to the mq notify function in the Linux kernel, which does not set the sock pointer to NULL upon entry into the retry logic. This allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact during a user-space close of a Netlink socket. The vulnerability can be exploited by a remote attacker to cause a denial of service or other impact.
Recommendations
For Linux kernel versions through 4.11.9, update to a version that includes the fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu