CVE-2017-5970: Null Pointer Dereference
A vulnerability was found in the Linux kernel. A remote attacker that can send packets containing malicious IP options could cause the ipv4pktinfoprepare() function to drop/free the dst. This could result in a system crash or possible privilege escalation if the attacker is able to place crafted objects in this dropped location.
Upstream patch:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644
References:
http://seclists.org/oss-sec/2017/q1/414 https://patchwork.ozlabs.org/patch/724136/
Other sources
The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service (system crash) via (1) an application that makes crafted system calls or possibly (2) IPv4 traffic with invalid IP options.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Fixed in 4.9.9 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 34b2cef20f19c87999fff3da4071e66937db9644 - Compensating control
Mitigate by preventing remote attackers from sending IPv4 packets with malicious/invalid IP options (e.g., filter/block such traffic at the network edge so it cannot reach affected systems).
Event History
Frequently Asked Questions
What is CVE-2017-5970?
CVE-2017-5970 is a vulnerability in the Linux kernel that allows attackers to cause a denial of service by making crafted system calls or sending IPv4 traffic with invalid IP options.
What is the severity of CVE-2017-5970?
CVE-2017-5970 has a severity rating of high (7 out of 10).
How does CVE-2017-5970 affect Linux kernel?
CVE-2017-5970 affects the Linux kernel versions up to 4.9.9.
What is the remedy for CVE-2017-5970?
The remedy for CVE-2017-5970 is to update the Linux kernel to version 4.10 or later.
Where can I find more information about CVE-2017-5970?
You can find more information about CVE-2017-5970 at the following references: [Link 1](http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644), [Link 2](http://seclists.org/oss-sec/2017/q1/414), [Link 3](https://patchwork.ozlabs.org/patch/724136/).