CVE-2017-6345: Input Validation
Last updated 29 November 2024
Other sources
The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUGON) or possibly have unspecified other impact via crafted system calls.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1 - Upgrade
Upgrade
Linux kernel LLC subsystemto a version that resolves this vulnerability.Fixed in 4.9.13
Event History
Frequently Asked Questions
What is CVE-2017-6345?
CVE-2017-6345 is a vulnerability in the Linux kernel where the LLC subsystem does not ensure that a certain destructor exists, allowing for a denial of service or unspecified impact.
How does CVE-2017-6345 impact systems?
CVE-2017-6345 can cause a denial of service (BUG_ON) or have unspecified other impact on affected Linux systems.
What is the severity of CVE-2017-6345?
The severity of CVE-2017-6345 is not specified, but it can result in a denial of service or other impact.
Which Linux kernel versions are affected by CVE-2017-6345?
The Linux kernel versions before 4.9.13 are affected by CVE-2017-6345.
How can I mitigate CVE-2017-6345?
To mitigate CVE-2017-6345, it is recommended to update the Linux kernel to version 4.9.13 or later.