PT-2017-19065 · Linux+2 · Linux Kernel+2

Murray Mcallister · Published 2017-06-13 · Updated 2018-07-09 · CVE-2017-9605

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.5

Description The issue concerns the vmw gb surface define ioctl function, accessible via the DRM IOCTL VMW GB SURFACE CREATE ioctl call, which does not properly initialize a backup handle variable. This allows local users to obtain sensitive information from uninitialized kernel memory by creating a GB surface with a previously allocated DMA buffer as a backup buffer, and then making a crafted ioctl call.

Recommendations For Linux kernel versions prior to 4.11.5, update to version 4.11.5 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2017-1854

ALT-PU-2018-1991

CVE-2017-9605

DSA-3927-1

DSA-3945-1

MGASA-2017-0186

MGASA-2017-0187

MGASA-2017-0188

USN-3358-1

USN-3359-1

USN-3360-1

USN-3360-2

USN-3364-1

USN-3364-2

USN-3364-3

USN-3371-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 63

• https://github.com/torvalds/linux/commit/07678eca2cf9c9a18584e546c2b2a0d0c9a3150c · Patch
• https://ubuntu.com/security/CVE-2015-8962 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3360-1 · Vendor Advisory
• http://debian.org/security/2017/dsa-3945 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9605 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0187 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8964 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3945-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3359-1 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=07678eca2cf9c9a18584e546c2b2a0d0c9a3150c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8924 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-9605 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-9605 · Vendor Advisory