PT-2017-14092 · Linux+2 · Linux Kernel+2

Dmitry Vyukov · Published 2017-10-05 · Updated 2018-07-09 · CVE-2017-15537

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.5

Description The issue concerns the x86/fpu subsystem in the Linux kernel, which does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt sigreturn() system call when a processor supports the xsave feature but not the xsaves feature. This allows local users to read the FPU registers of other processes on the system.

Recommendations For Linux kernel versions prior to 4.13.5, update to version 4.13.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the ptrace() and rt sigreturn() system calls to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2017-2378

ALT-PU-2018-1991

CVE-2017-15537

USN-3469-1

USN-3469-2

USN-3487-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 28

• https://github.com/torvalds/linux/commit/814fb7bb7db5433757d76f4c4502c96fc53b0b5e · Patch
• https://ubuntu.com/security/notices/USN-3487-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14051 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9985 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12153 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3469-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-10911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-15537 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15537 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3469-2 · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=814fb7bb7db5433757d76f4c4502c96fc53b0b5e · Patch