PT-2018-6707 · Linux+3 · Linux Kernel+3

Published 2016-08-18 · Updated 2019-05-17 · CVE-2017-18174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7

Description: The issue arises from the amd gpio remove function in drivers/pinctrl/pinctrl-amd.c, which calls the pinctrl unregister function, resulting in a double free.

Recommendations: For Linux kernel versions prior to 4.7, update to version 4.7 or later to resolve the issue.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2016-1862

ALT-PU-2017-1330

CVE-2017-18174

OPENSUSE-SU-2018_0781-1

SUSE-SU-2018:0786-1

SUSE-SU-2018:0986-1

SUSE-SU-2019:1287-1

USN-3848-1

USN-3848-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 277

• https://github.com/torvalds/linux/commit/8dca4a41f1ad65043a78c2338d9725f859c8d2c3 · Patch
• https://github.com/torvalds/linux/commit/251e22abde21833b3d29577e4d8c7aaccd650eee · Patch
• https://usn.ubuntu.com/3848-1 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=251e22abde21833b3d29577e4d8c7aaccd650eee · Patch
• https://osv.dev/vulnerability/CVE-2017-18174 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-18174 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12896 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0986-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0786-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18710 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1287-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3848-2 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8dca4a41f1ad65043a78c2338d9725f859c8d2c3 · Patch
• https://ubuntu.com/security/notices/USN-3848-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18690 · Vendor Advisory