CVE-2017-7541: Buffer Overflow
First published: Thu Jul 20 2017(Updated: )
Kernel memory corruption due to a buffer overflow was found in brcmf_cfg80211_mgmt_tx() function in Linux kernels from v3.9-rc1 to v4.13-rc1. It can be triggered by sending crafted NL80211_CMD_FRAME packet via netlink. This flaw is unlikely to be triggered remotely, as certain userspace code is needed for this. An unprivileged local user could use this flaw to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely. References: <a href="http://seclists.org/oss-sec/2017/q3/208">http://seclists.org/oss-sec/2017/q3/208</a> <a href="https://bugzilla.novell.com/show_bug.cgi?id=1049645">https://bugzilla.novell.com/show_bug.cgi?id=1049645</a> <a href="https://www.spinics.net/lists/stable/msg180994.html">https://www.spinics.net/lists/stable/msg180994.html</a> Upstream patch: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c</a>
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | >=3.9<3.10.108 | |
| Linux Linux kernel | >=3.11<3.16.48 | |
| Linux Linux kernel | >=3.17<3.18.62 | |
| Linux Linux kernel | >=3.19<4.1.43 | |
| Linux Linux kernel | >=4.2<4.4.78 | |
| Linux Linux kernel | >=4.5<4.9.39 | |
| Linux Linux kernel | >=4.10<4.11.12 | |
| Linux Linux kernel | >=4.12<4.12.3 | |
| Google Android | ||
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c
- http://openwall.com/lists/oss-security/2017/07/24/2
- http://www.debian.org/security/2017/dsa-3927
- http://www.debian.org/security/2017/dsa-3945
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.3
- http://www.securityfocus.com/bid/99955
- http://www.securitytracker.com/id/1038981
- https://access.redhat.com/errata/RHSA-2017:2863
- https://access.redhat.com/errata/RHSA-2017:2918
- https://access.redhat.com/errata/RHSA-2017:2930
- https://access.redhat.com/errata/RHSA-2017:2931
- https://bugzilla.novell.com/show_bug.cgi?id=1049645
- https://bugzilla.redhat.com/show_bug.cgi?id=1473198
- https://github.com/torvalds/linux/commit/8f44c9a41386729fea410e688959ddaa9d51be7c
- https://source.android.com/security/bulletin/2017-11-01
- https://www.spinics.net/lists/stable/msg180994.html
- https://launchpad.net/bugs/cve/CVE-2017-7541
- http://seclists.org/oss-sec/2017/q3/208
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1473199
- https://source.android.com//git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8f44c9a41386729fea410e688959ddaa9d51be7c
- https://source.android.com/docs/security/bulletin/2017-11-01 (Advisory)
- https://git.kernel.org/linus/8f44c9a41386729fea410e688959ddaa9d51be7c
- https://security-tracker.debian.org/tracker/CVE-2017-7541
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7541
- https://nvd.nist.gov/vuln/detail/CVE-2017-7541
- https://ubuntu.com/security/CVE-2017-7541
Frequently Asked Questions
What is CVE-2017-7541?
CVE-2017-7541 is a vulnerability in the Linux kernel that allows local users to cause a denial of service or possibly gain privileges.
How severe is CVE-2017-7541?
CVE-2017-7541 is considered to be a high severity vulnerability, with a severity value of 7.
How does CVE-2017-7541 impact the Linux kernel?
CVE-2017-7541 can lead to a buffer overflow and system crash, as well as potential privilege escalation.
Which versions of the Linux kernel are affected by CVE-2017-7541?
Versions before 4.12.3 are affected by CVE-2017-7541.
How can I mitigate CVE-2017-7541?
To mitigate CVE-2017-7541, it is recommended to update to Linux kernel version 4.12.3 or later.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2017-7541
- agent/author
- agent/severity
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- collector/android-source
- source/Android
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/tags
- collector/usn-cve
- source/Ubuntu
- agent/event
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- agent/trending
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.9
- version/linux linux kernel/3.11
- version/linux linux kernel/3.17
- version/linux linux kernel/3.19
- version/linux linux kernel/4.2
- version/linux linux kernel/4.5
- version/linux linux kernel/4.10
- version/linux linux kernel/4.12
- vendor/google
- canonical/google android
- package-manager/debian