PT-2017-3622 · Linux+1 · Linux Kernel+1
Publicado
2017-11-29
·
Atualizado
2023-06-21
·
CVE-2017-18202
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.14.4
Description:
The issue is related to the
oom reap task mm function in mm/oom kill.c, which mishandles gather operations. This can allow attackers to cause a denial of service, such as a TLB entry leak or use-after-free, or possibly have other unspecified impacts. The exploitation involves triggering a copy to user call within a certain time window.Recommendations:
For Linux kernel versions prior to 4.14.4, update to version 4.14.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the
copy to user function to minimize the risk of exploitation.Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel