CVE-2017-6348: Medium severity Linux Linux kernel vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2017-6348.

Q: What is the title of the vulnerability?

The title of the vulnerability is 'The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping'.

Q: What is the severity of CVE-2017-6348?

The severity of CVE-2017-6348 is not specified in the provided information.

Q: How does CVE-2017-6348 impact the Linux kernel?

CVE-2017-6348 allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.

Q: How can I fix CVE-2017-6348?

To fix CVE-2017-6348, update the Linux kernel to version 4.9.13 or later.

Published Mar 1, 2017

Updated

Last updated 29 November 2024

Other sources

The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.

Affected Software

23 affected componentsFixes available

Linux Linux kernel<=4.9.12

ubuntu/linux<3.13.0-157.207

3.13.0-157.207

ubuntu/linux-lts-xenial<4.4.0-75.96~14.04.1

4.4.0-75.96~14.04.1

ubuntu/linux<4.4.0-75.96

4.4.0-75.96

ubuntu/linux-aws<4.4.0-1016.25

4.4.0-1016.25

ubuntu/linux-gke<4.4.0-1012.12

4.4.0-1012.12

ubuntu/linux-hwe<4.10.0-32.36~16.04.1

4.10.0-32.36~16.04.1

ubuntu/linux-raspi2<4.4.0-1054.61

4.4.0-1054.61

ubuntu/linux-snapdragon<4.4.0-1057.61

4.4.0-1057.61

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-157.207
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-75.96~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-75.96
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1016.25
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 4.4.0-1012.12
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.10.0-32.36~16.04.1
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1054.61
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1057.61
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Upgrade
Upgrade linux kernel to a version that resolves this vulnerability.
Fixed in 4.9.13

Event History

Mar 1, 2017

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:59 PM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-3804

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-849-1

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2017-6348.

What is the title of the vulnerability?

The title of the vulnerability is 'The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping'.

What is the severity of CVE-2017-6348?

The severity of CVE-2017-6348 is not specified in the provided information.

How does CVE-2017-6348 impact the Linux kernel?

CVE-2017-6348 allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices.

How can I fix CVE-2017-6348?

To fix CVE-2017-6348, update the Linux kernel to version 4.9.13 or later.

CVE-2017-6348: Medium severity Linux Linux kernel vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the vulnerability ID?

What is the title of the vulnerability?

What is the severity of CVE-2017-6348?

How does CVE-2017-6348 impact the Linux kernel?

How can I fix CVE-2017-6348?

Company

Resources

Contact