Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
BID:102485
CVE-2017-15129 |Info
Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
| Bugtraq ID: | 102485 |
| Class: | Design Error |
| CVE: |
CVE-2017-15129 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 19 2017 12:00AM |
| Updated: | Dec 19 2017 12:00AM |
| Credit: | Kirill Tkhai |
| Vulnerable: |
Redhat Enterprise Mrg 2 Redhat Enterprise Linux 7 Linux kernel 4.14.11 Linux kernel 4.14.10 Linux kernel 4.14.6 Linux kernel 4.14.5 Linux kernel 4.14.1 Linux kernel 4.13.11 Linux kernel 4.13.10 Linux kernel 4.13.9 Linux kernel 4.13.8 Linux kernel 4.13.7 Linux kernel 4.13.6 Linux kernel 4.13.4 Linux kernel 4.13.3 Linux kernel 4.12.9 Linux kernel 4.12.3 Linux kernel 4.12.2 Linux kernel 4.11.9 Linux kernel 4.11.5 Linux kernel 4.11.4 Linux kernel 4.11.3 Linux kernel 4.11.2 Linux kernel 4.11.1 Linux kernel 4.11 Linux kernel 4.10.15 Linux kernel 4.10.13 Linux kernel 4.10.12 Linux kernel 4.10.10 Linux kernel 4.10.6 Linux kernel 4.10.4 Linux kernel 4.10 Linux kernel 4.9.74 Linux kernel 4.9.71 Linux kernel 4.9.68 Linux kernel 4.9.36 Linux kernel 4.9.13 Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.8.11 Linux kernel 4.7.4 Linux kernel 4.4.105 Linux kernel 4.4.30 Linux kernel 4.4.29 Linux kernel 4.4.28 Linux kernel 4.4.27 Linux kernel 4.4.25 Linux kernel 4.4.24 Linux kernel 4.4.23 Linux kernel 4.4.22 Linux kernel 4.4.7 Linux kernel 4.4.2 Linux kernel 4.2.3 Linux kernel 4.1.47 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 4.0.6 Linux kernel 4.9.9 Linux kernel 4.9.11 Linux kernel 4.9-rc8 Linux kernel 4.9-rc4 Linux kernel 4.9-rc3 Linux kernel 4.9-rc1 Linux kernel 4.9 Linux kernel 4.8.7 Linux kernel 4.8.6 Linux kernel 4.8.3 Linux kernel 4.8.14 Linux kernel 4.8.13 Linux kernel 4.8.12 Linux kernel 4.8.1 Linux kernel 4.8 rc1 Linux kernel 4.8 Linux kernel 4.7.9 Linux kernel 4.7-rc6 Linux kernel 4.7-rc5 Linux kernel 4.7-rc1 Linux kernel 4.6.3 Linux kernel 4.6.2 Linux kernel 4.6.1 Linux kernel 4.6-rc1 Linux kernel 4.6 rc7 Linux kernel 4.6 rc6 Linux kernel 4.6 Linux kernel 4.5.5 Linux kernel 4.5-rc7 Linux kernel 4.5-rc4 Linux kernel 4.5-rc2 Linux kernel 4.5-rc1 Linux kernel 4.5 Linux kernel 4.4.38 Linux kernel 4.4.26 Linux kernel 4.4.14 Linux kernel 4.4.1 Linux kernel 4.4.0-57 Linux kernel 4.4-rc5 Linux kernel 4.4-rc4 Linux kernel 4.4-rc1 Linux kernel 4.4 Linux kernel 4.3.3 Linux kernel 4.3-rc1 Linux kernel 4.2.8 Linux kernel 4.2 Linux kernel 4.15-rc5 Linux kernel 4.14.8 Linux kernel 4.14.7 Linux kernel 4.14.4 Linux kernel 4.14.3 Linux kernel 4.14.2 Linux kernel 4.14.0-rc1 Linux kernel 4.14-rc5 Linux kernel 4.14-rc1 Linux kernel 4.14 Linux kernel 4.13.5 Linux kernel 4.13.2 Linux kernel 4.13.1 Linux kernel 4.13-rc1 Linux kernel 4.13 Linux kernel 4.12.10 Linux kernel 4.12.1 Linux kernel 4.12-rc1 Linux kernel 4.12 Linux kernel 4.11.8 Linux kernel 4.11.7 Linux kernel 4.11-rc8 Linux kernel 4.11-rc7 Linux kernel 4.11-rc6 Linux kernel 4.11-rc5 Linux kernel 4.11-rc4 Linux kernel 4.11-rc3 Linux kernel 4.11-rc2 Linux kernel 4.11-rc1 Linux kernel 4.11 Linux kernel 4.10.9 Linux kernel 4.10.8 Linux kernel 4.10.7 Linux kernel 4.10.5 Linux kernel 4.10.3 Linux kernel 4.10.2 Linux kernel 4.10.11 Linux kernel 4.10.1 Linux kernel 4.10-rc8 Linux kernel 4.10-rc1 Linux kernel 4.1.15 Linux kernel 4.1-rc7 Linux kernel 4.1-rc6 Linux kernel 4.1-rc3 Linux kernel 4.1-rc1 Linux kernel 4.1 Linux kernel 4.0.5 Linux kernel 4.0-rc1 |
| Not Vulnerable: | |
Discussion
Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
The Linux Kernel is prone to a local memory-corruption vulnerability.
An attacker can exploit this issue to cause denial-of-service condition. Due to the nature of this issue, privilege-escalation may be possible; however, this has not been confirmed.
The Linux Kernel is prone to a local memory-corruption vulnerability.
An attacker can exploit this issue to cause denial-of-service condition. Due to the nature of this issue, privilege-escalation may be possible; however, this has not been confirmed.
Exploit / POC
Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel CVE-2017-15129 Local Use After Free Memory Corruption Vulnerability
References:
References:
- '[PATCH] net: Fix double free and memory corruption in get_net_ns_by_id()' (Linux)
- [PATCH] net: Fix double free and memory corruption in get_net_ns_by_id() (Linux)
- Bug 1531174 - (CVE-2017-15129) CVE-2017-15129 kernel: net: double-free and memor (RedHat)
- CVE-2017-15129 (Red Hat)
- Linux 4.14.11 (Linux)
- Linux Homepage (Linux)
- net: Fix double free and memory corruption in get_net_ns_by_id() (Linux)
- Oracle Linux Bulletin - April 2018 (Oracle)