CVE-2017-7541: Buffer Overflow
Kernel memory corruption due to a buffer overflow was found in brcmfcfg80211mgmttx() function in Linux kernels from v3.9-rc1 to v4.13-rc1. It can be triggered by sending crafted NL80211CMDFRAME packet via netlink.
This flaw is unlikely to be triggered remotely, as certain userspace code is needed for this. An unprivileged local user could use this flaw to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
References:
http://seclists.org/oss-sec/2017/q3/208
https://bugzilla.novell.com/showbug.cgi?id=1049645
https://www.spinics.net/lists/stable/msg180994.html
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c
Other sources
The brcmfcfg80211mgmttx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211CMDFRAME Netlink packet.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-7541?
CVE-2017-7541 is a vulnerability in the Linux kernel that allows local users to cause a denial of service or possibly gain privileges.
How severe is CVE-2017-7541?
CVE-2017-7541 is considered to be a high severity vulnerability, with a severity value of 7.
How does CVE-2017-7541 impact the Linux kernel?
CVE-2017-7541 can lead to a buffer overflow and system crash, as well as potential privilege escalation.
Which versions of the Linux kernel are affected by CVE-2017-7541?
Versions before 4.12.3 are affected by CVE-2017-7541.
How can I mitigate CVE-2017-7541?
To mitigate CVE-2017-7541, it is recommended to update to Linux kernel version 4.12.3 or later.