CVE-2017-10661: Use After Free
Last updated 29 November 2024
Other sources
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper mightcancel queueing.
— Launchpad
The handling of the mightcancel queueing is not properly protected, so parallel operations on the file descriptor can race with each other and lead to list corruptions or use after free.
References:
https://marc.info/?l=linux-fsdevel&m=148587265720603&w=2
https://marc.info/?t=148587273100007&r=1&w=2
https://source.android.com/security/bulletin/2017-08-01#kernel-components
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-10661?
CVE-2017-10661 is a race condition vulnerability in the Linux kernel before version 4.10.15.
How does CVE-2017-10661 impact users?
CVE-2017-10661 allows local users to gain privileges or cause a denial of service through simultaneous file-descriptor operations that leverage improper might_cancel queueing.
What is the severity of CVE-2017-10661?
CVE-2017-10661 has a severity rating of high.
How can I fix CVE-2017-10661 on Ubuntu?
To fix CVE-2017-10661 on Ubuntu, update the Linux kernel to version 4.11 or higher.
Where can I find more information about CVE-2017-10661?
You can find more information about CVE-2017-10661 on the following references: [1](https://marc.info/?l=linux-fsdevel&m=148587265720603&w=2), [2](https://marc.info/?t=148587273100007&r=1&w=2), [3](https://source.android.com/security/bulletin/2017-08-01#kernel-components).