PT-2017-2424 · Linux+2 · Linux Kernel+2

Pengfei Wang · Published 2017-06-28 · Updated 2023-02-24 · CVE-2017-9985

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.7

Description The issue is related to the snd msndmidi input read function in the Linux kernel, specifically in the sound/isa/msnd/msnd midi.c file. It is caused by an out-of-bounds access in memory, which can be exploited to cause a denial of service or potentially have other unspecified impacts. This can be achieved by locally changing the value of a message queue head pointer between two kernel reads of that value, also known as a "double fetch" vulnerability.

Recommendations For Linux kernel versions prior to 4.11.7, update to version 4.11.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the snd msndmidi input read function to minimize the risk of exploitation.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2017-2206

ALT-PU-2017-2208

BDU:2017-01627

CVE-2017-9985

USN-3469-1

USN-3469-2

USN-3754-1

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 84

• https://ubuntu.com/security/CVE-2018-1093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-13094 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10021 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16538 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16536 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-9985 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3754-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10877 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16537 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-12153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16535 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000204 · Vendor Advisory