PT-2018-6707 · Linux+3 · Linux Kernel+3

Publicado 2016-08-18 · Atualizado 2019-05-17 · CVE-2017-18174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7

Description: The issue arises from the amd gpio remove function in drivers/pinctrl/pinctrl-amd.c, which calls the pinctrl unregister function, resulting in a double free.

Recommendations: For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2016-1862

ALT-PU-2017-1330

CVE-2017-18174

OPENSUSE-SU-2018_0781-1

SUSE-SU-2018:0786-1

SUSE-SU-2018:0986-1

SUSE-SU-2019:1287-1

USN-3848-1

USN-3848-2

Produtos afetados

Alt Linux

Linux Kernel

Suse

Ubuntu

Referências · 277

• https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3 · Correção
• https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee · Correção
• https://bugzilla.suse.com/1085045 · Nota
• https://bugzilla.suse.com/1024376 · Nota
• https://bugzilla.suse.com/1081514 · Nota
• https://suse.com/security/cve/CVE-2018-1000026 · Nota
• https://bugzilla.suse.com/1131416 · Nota
• https://bugzilla.suse.com/1079989 · Nota
• https://bugzilla.suse.com/1073928 · Nota
• https://bugzilla.suse.com/1085056 · Nota
• https://bugzilla.suse.com/1082223 · Nota
• https://suse.com/security/cve/CVE-2017-17741 · Nota
• https://bugzilla.suse.com/1100152 · Nota
• https://bugzilla.suse.com/1077871 · Nota
• https://bugzilla.suse.com/975772 · Nota