PT-2017-3586 · Linux+3 · Linux Kernel+3

Published 2017-10-03 · Updated 2024-02-05 · CVE-2017-15126

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6

Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd ctx put(). This flaw may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations: For Linux kernel versions prior to 4.13.6, update to version 4.13.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the userfaultfd ctx put() function until a patch is available.

Fix

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

ALT-PU-2017-2434

BDU:2018-00518

CESA-2018_1062

CVE-2017-15126

RHSA-2018:0676

RHSA-2018:1062

RHSA-2018_0676

RHSA-2018_1062

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2017-15126 · Security Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15126 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0676 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1062 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-15126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-15126 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00518 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-15126 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15126 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15126 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-1062.html · Vendor Advisory
• https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252 · Note