The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Oct 27, 2017 | Jul 11, 2017 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Oct 25, 2017 | Jul 11, 2017 |
| Debian | debian-upgrade-linux | Aug 7, 2017 | Jul 11, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-kernelhuawei-euleros-2_0_sp1-upgrade-kernel-debughuawei-euleros-2_0_sp1-upgrade-kernel-debuginfohuawei-euleros-2_0_sp1-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp1-upgrade-kernel-develhuawei-euleros-2_0_sp1-upgrade-kernel-headershuawei-euleros-2_0_sp1-upgrade-kernel-toolshuawei-euleros-2_0_sp1-upgrade-kernel-tools-libshuawei-euleros-2_0_sp1-upgrade-perfhuawei-euleros-2_0_sp1-upgrade-python-perf | Nov 30, 2017 | Jul 11, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Oct 20, 2017 | Jul 9, 2017 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Oct 25, 2017 | Jul 11, 2017 |
| Suse | — | suse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extra | Sep 8, 2017 | Jul 11, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-135-genericubuntu-upgrade-linux-image-3-13-0-135-generic-lpaeubuntu-upgrade-linux-image-3-13-0-135-lowlatencyubuntu-upgrade-linux-image-3-13-0-135-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-135-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-135-powerpc-smpubuntu-upgrade-linux-image-3-13-0-135-powerpc64-embubuntu-upgrade-linux-image-3-13-0-135-powerpc64-smpubuntu-upgrade-linux-image-4-10-0-1008-gcpubuntu-upgrade-linux-image-4-10-0-1020-raspi2ubuntu-upgrade-linux-image-4-10-0-38-genericubuntu-upgrade-linux-image-4-10-0-38-generic-lpaeubuntu-upgrade-linux-image-4-10-0-38-lowlatencyubuntu-upgrade-linux-image-4-4-0-1028-gkeubuntu-upgrade-linux-image-4-4-0-1032-awsubuntu-upgrade-linux-image-4-4-0-1071-raspi2ubuntu-upgrade-linux-image-4-4-0-1073-snapdragonubuntu-upgrade-linux-image-4-4-0-93-genericubuntu-upgrade-linux-image-4-4-0-93-generic-lpaeubuntu-upgrade-linux-image-4-4-0-93-lowlatencyubuntu-upgrade-linux-image-4-4-0-93-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-93-powerpc-smpubuntu-upgrade-linux-image-4-4-0-93-powerpc64-embubuntu-upgrade-linux-image-4-4-0-93-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Aug 29, 2017 | Jul 11, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub