Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Geneblue

#33463of 53,624
7.8Total CVSS
Vulnerabilities · 1
PT-2017-2476
7.8
2017-07-09
Linux · Linux Kernel · CVE-2017-11176
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 4.11.9 **Description** The issue is related to the mq notify function in the Linux kernel, which does not set the sock pointer to NULL upon entry into the retry logic. This allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact during a user-space close of a Netlink socket. The vulnerability can be exploited by a remote attacker to cause a denial of service or other impact. **Recommendations** For Linux kernel versions through 4.11.9, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.