PT-2017-3586 · Linux+3 · Linux Kernel+3

Publicado 2017-10-03 · Atualizado 2024-02-05 · CVE-2017-15126

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6

Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd ctx put(). This flaw may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations: For Linux kernel versions prior to 4.13.6, update to version 4.13.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the userfaultfd ctx put() function until a patch is available.

Correção

Buffer Overflow

Use After Free

Enumeração de Fraquezas

CWE-119

CWE-416

Identificadores relacionados

ALT-PU-2017-2434

BDU:2018-00518

CESA-2018_1062

CVE-2017-15126

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018_0676

RHSA-2018_1062

Produtos afetados

Alt Linux

Centos

Linux Kernel

Red Hat

Referências · 21

• https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15126 · Nota de Segurança
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15126 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:0676 · Aviso do Fabricante
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252 · Nota
• https://access.redhat.com/errata/RHSA-2018:1062 · Aviso do Fabricante
• http://wiki.rosalab.ru/ru/index.php/ROSA-SA-18-05-22.009 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15126 · Nota
• http://securityfocus.com/bid/102516 · Nota
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2017-15126 · Aviso do Fabricante
• https://t.me/cvenotify/70092 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2017-15126 · Nota
• https://ubuntu.com/security/CVE-2017-15126 · Aviso do Fabricante