PT-2017-3262 · Linux+5 · Linux Kernel+5

Alexander Potapenko · Published 2017-06-07 · Updated 2018-07-09 · CVE-2017-1000380

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.5

Description The issue is related to a data race in the ALSA /dev/snd/timer driver of the Linux kernel, which can lead to the disclosure of information. This can occur when a read and an ioctl happen simultaneously, potentially allowing a local attacker to access confidential information by exploiting access rights to sound devices. The vulnerable component is located in sound/core/timer.c.

Recommendations For Linux kernel versions prior to 4.11.5, update to version 4.11.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the sound devices to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2017-1854

ALT-PU-2018-1991

BDU:2018-00018

CESA-2017_3315

CVE-2017-1000380

DLA-1099-1

DSA-3981-1

MGASA-2017-0186

MGASA-2017-0187

MGASA-2017-0188

OPENSUSE-SU-2017_1633-1

RHSA-2017:3295

RHSA-2017:3315

RHSA-2017:3322

RHSA-2017_3315

RHSA-2017_3322

SUSE-SU-2017:1853-1

SUSE-SU-2017:1990-1

SUSE-SU-2017:2342-1

SUSE-SU-2017:2389-1

SUSE-SU-2017:2525-1

SUSE-SU-2017:2908-1

SUSE-SU-2017:2920-1

USN-3358-1

USN-3359-1

USN-3360-1

USN-3360-2

USN-3364-1

USN-3364-2

USN-3364-3

USN-3371-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 710

• https://github.com/torvalds/linux/commit/d11662f4f798b50d8c8743f433842c3e40fe3378 · Patch
• https://github.com/torvalds/linux/commit/ba3021b2c79b2fa9114f92790a99deb27a65b728 · Patch
• https://linux.oracle.com/errata/ELSA-2017-3315.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000380 · Security Note
• https://ubuntu.com/security/notices/USN-3358-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3637.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2017/06/12/2 · Patch
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d11662f4f798b50d8c8743f433842c3e40fe3378 · Patch
• https://advisories.mageia.org/MGASA-2017-0186.html · Security Note
• https://ubuntu.com/security/notices/USN-3359-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8964 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2017-3636.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2908-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-1000380 · Vendor Advisory