CVE-2017-9242: Input Validation
Last updated 29 November 2024
Other sources
The ip6appenddata function in net/ipv6/ip6output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service (system crash) via crafted system calls.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-123.172 - Upgrade
Upgrade
ubuntu/linux-lts-xenialto a version that resolves this vulnerability.Fixed in 4.4.0-83.106~14.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 4.4.0-83.106 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 4.4.0-1022.31 - Upgrade
Upgrade
ubuntu/linux-gketo a version that resolves this vulnerability.Fixed in 4.4.0-1018.18 - Upgrade
Upgrade
ubuntu/linux-hweto a version that resolves this vulnerability.Fixed in 4.10.0-32.36~16.04.1 - Upgrade
Upgrade
ubuntu/linux-raspi2to a version that resolves this vulnerability.Fixed in 4.4.0-1061.69 - Upgrade
Upgrade
ubuntu/linux-snapdragonto a version that resolves this vulnerability.Fixed in 4.4.0-1063.68
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9242?
The severity of CVE-2017-9242 is medium.
How does CVE-2017-9242 affect Linux kernel?
CVE-2017-9242 allows local users to cause a denial of service (system crash) via crafted system calls.
Which versions of the Linux kernel are affected by CVE-2017-9242?
The Linux kernel through 4.11.3 is affected by CVE-2017-9242.
How can I fix CVE-2017-9242?
Apply the remedy provided by the Ubuntu source for the affected package versions.
Where can I find more information about CVE-2017-9242?
More information about CVE-2017-9242 can be found at the provided reference links.