CVE-2017-8890: Double Free
Last updated 29 November 2024
Other sources
The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
References:
https://2freeman.github.io/2018/01/06/CVE-2017-8890-internals.html
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=657831ffc38e30092a2d5f03d385d710eb88b09a
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8b485ce69876c65db12ed390e7f9c0d2a64eff2c
— Red Hat
The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call. An unprivileged local user could use this flaw to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is unlikely.
The inetcskclonelock function in net/ipv4/inetconnectionsock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-754.el6 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-693.rt56.617.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-693.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 1:3.10.0-693.2.1.rt56.585.el6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.21-1Fixed in 6.12.22-1 - Upgrade
Upgrade
Linux kernel (net/ipv4/inet_connection_sock.c: inet_csk_clone_lock)to a version that resolves this vulnerability.Patch 657831ffc38e30092a2d5f03d385d710eb88b09a - Upgrade
Upgrade
Linux kernel (net/ipv4/inet_connection_sock.c: inet_csk_clone_lock)to a version that resolves this vulnerability.Patch 8b485ce69876c65db12ed390e7f9c0d2a64eff2c - Compensating control
As a mitigative measure for this issue (double free/DoS via accept() in inet_csk_clone_lock), restrict/limit untrusted local users’ ability to trigger the vulnerable path by applying appropriate OS access controls (least privilege / restrict who can invoke the relevant functionality).
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2017-8890?
CVE-2017-8890 has a severity level that allows attackers to cause a denial of service through a double free condition.
How do I fix CVE-2017-8890?
To fix CVE-2017-8890, upgrade your Linux kernel to the patched versions specified in your distribution's errata.
Which systems are affected by CVE-2017-8890?
CVE-2017-8890 affects various versions of the Linux kernel, particularly those older than the patched versions provided by Red Hat and Debian.
What impact could CVE-2017-8890 have on my system?
CVE-2017-8890 can lead to a denial of service or potentially allow for further unspecified impacts on affected systems.
Is CVE-2017-8890 a common vulnerability?
CVE-2017-8890 is a known vulnerability within the Linux kernel, and systems running vulnerable versions should be prioritized for patching.