CVE-2017-9986: High severity Linux Linux kernel vulnerability

Q: Who can exploit this issue?

Exploitation requires local access and low privileges. A remote unauthenticated attacker is not indicated by the provided vector.

Q: What does an attacker need to do?

The attacker must change a message queue head pointer between two kernel reads of that value in the affected intr function. No user interaction is required.

Q: What is the likely impact?

The documented impact includes denial of service through an over-boundary access. Other impact may be possible but is unspecified; the severity vector indicates potential high confidentiality, integrity, and availability impact.

Q: Which kernel versions are identified as affected?

The issue is described as affecting the Linux kernel through version 4.11.7. The provided data does not identify the fixed version or distribution-specific fixed package versions.

Published Jun 28, 2017

Updated

The intr function in sound/oss/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.

Affected Software

19 affected componentsFixes available

Linux Linux kernel<=4.11.7

ubuntu/linux<3.13.0-220.271

3.13.0-220.271

ubuntu/linux-aws*

ubuntu/linux-lts-xenial*

ubuntu/linux-azure<4.13.0-1005.7

4.13.0-1005.7

ubuntu/linux-gcp<4.13.0-1002.5

4.13.0-1002.5

ubuntu/linux-hwe<4.13.0-32.35~16.04.1

4.13.0-32.35~16.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-kvm*

ubuntu/linux-fips*

ubuntu/linux-snapdragon<4.15.0-1053.57

4.15.0-1053.57

ubuntu/linux-azure-fde*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-220.271
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.13.0-1005.7
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.13.0-1002.5
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.13.0-32.35~16.04.1
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.15.0-1053.57

Event History

Jun 28, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Data Sourced

via OSV·06:29 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires local access and low privileges. A remote unauthenticated attacker is not indicated by the provided vector.

What does an attacker need to do?

The attacker must change a message queue head pointer between two kernel reads of that value in the affected intr function. No user interaction is required.

What is the likely impact?

The documented impact includes denial of service through an over-boundary access. Other impact may be possible but is unspecified; the severity vector indicates potential high confidentiality, integrity, and availability impact.

Which kernel versions are identified as affected?

The issue is described as affecting the Linux kernel through version 4.11.7. The provided data does not identify the fixed version or distribution-specific fixed package versions.

CVE-2017-9986: High severity Linux Linux kernel vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do?

What is the likely impact?

Which kernel versions are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What does an attacker need to do?

What is the likely impact?

Which kernel versions are identified as affected?