CVE-2017-2618: Medium severity linux kernel vulnerability
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.
Other sources
A flaw was found in the Linux kernels handling of clearing SELinux attributes on /proc/pid/attr files. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.
This may lead to local DoS by panicing the system.
Proposed patch:
https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=0c461cb727d146c9ef2d3e86214f498b78b7d125
https://marc.info/?l=selinux&m=148588165923772&w=2
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-2618?
CVE-2017-2618 is a vulnerability in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files.
How severe is CVE-2017-2618?
CVE-2017-2618 has a severity rating of medium.
What is the impact of CVE-2017-2618?
An empty (null) write to /proc/pid/attr files can crash the system by causing the system to attempt to access unmapped kernel memory.
How can I fix CVE-2017-2618?
To fix CVE-2017-2618, update your Linux kernel to version 4.10 or higher.
Where can I find more information about CVE-2017-2618?
You can find more information about CVE-2017-2618 in the following references: <ul><li><a href="https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=0c461cb727d146c9ef2d3e86214f498b78b7d125">Git commit</a></li><li><a href="https://marc.info/?l=selinux&m=148588165923772&w=2">SELinux mailing list</a></li><li><a href="https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1419916#c2">Red Hat Bugzilla</a></li></ul>