Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities

Bugtraq ID:	98547
Class:	Boundary Condition Error
CVE:	CVE-2017-8244
Remote:	No
Local:	Yes
Published:	May 19 2017 12:00AM
Updated:	May 23 2017 04:27PM
Credit:	CodeAurora
Vulnerable:	Linux kernel 4.11 Linux kernel 4.10.13 Linux kernel 4.10.12 Linux kernel 4.10.10 Linux kernel 4.10.6 Linux kernel 4.10.4 Linux kernel 4.10 Linux kernel 4.9.13 Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.7.4 Linux kernel 4.4.30 Linux kernel 4.4.29 Linux kernel 4.4.28 Linux kernel 4.4.27 Linux kernel 4.4.25 Linux kernel 4.4.24 + S.u.S.E. Linux 7.2 Linux kernel 4.4.23 Linux kernel 4.4.22 Linux kernel 4.4.7 Linux kernel 4.4.2 Linux kernel 4.2.3 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 4.0.6 Linux kernel 3.19.3 Linux kernel 3.18.22 Linux kernel 3.18.17 Linux kernel 3.18.11 Linux kernel 3.18.8 Linux kernel 3.18.7 Linux kernel 3.18.3 Linux kernel 3.18.2 Linux kernel 3.18.1 Linux kernel 3.17.4 Linux kernel 3.17.2 Linux kernel 3.16.7 Linux kernel 3.16.2 Linux kernel 3.16.1 Linux kernel 3.15.10 Linux kernel 3.15.5 Linux kernel 3.15.2 Linux kernel 3.14.54 Linux kernel 3.14.45 Linux kernel 3.14.37 Linux kernel 3.14.4 Linux kernel 3.14.3 Linux kernel 3.14.2 Linux kernel 3.13.11 Linux kernel 3.13.9 Linux kernel 3.13.3 Linux kernel 3.13.1 Linux kernel 3.12.49 Linux kernel 3.12.48 Linux kernel 3.12.44 Linux kernel 3.12.40 Linux kernel 3.12.21 Linux kernel 3.12.18 Linux kernel 3.12.17 Linux kernel 3.12.16 Linux kernel 3.12.11 Linux kernel 3.12.7 Linux kernel 3.12.4 Linux kernel 3.12.3 Linux kernel 3.12.2 Linux kernel 3.11.3 Linux kernel 3.10.90 Linux kernel 3.10.81 Linux kernel 3.10.73 Linux kernel 3.10.45 Linux kernel 3.10.41 Linux kernel 3.10.38 Linux kernel 3.10.37 Linux kernel 3.10.36 Linux kernel 3.10.30 Linux kernel 3.10.27 Linux kernel 3.10.26 Linux kernel 3.10.23 Linux kernel 3.10.22 Linux kernel 3.10.21 Linux kernel 3.10.14 Linux kernel 3.10.10 Linux kernel 3.10.9 Linux kernel 3.10.7 Linux kernel 3.10 Linux kernel 3.8.9 Linux kernel 3.8.6 Linux kernel 3.8.5 Linux kernel 3.8.4 Linux kernel 3.8.2 Linux kernel 3.8.1 Linux kernel 3.7.10 Linux kernel 3.7.9 Linux kernel 3.7.8 Linux kernel 3.7.7 Linux kernel 3.7.5 Linux kernel 3.7.4 Linux kernel 3.7.3 Linux kernel 3.7.2 Linux kernel 3.7.1 Linux kernel 3.6.11 Linux kernel 3.6.10 Linux kernel 3.6.9 Linux kernel 3.6.8 Linux kernel 3.6.7 Linux kernel 3.6.6 Linux kernel 3.6.5 Linux kernel 3.6.4 Linux kernel 3.6.3 Linux kernel 3.6.2 Linux kernel 3.6.1 Linux kernel 3.5.7 Linux kernel 3.5.6 Linux kernel 3.5.5 Linux kernel 3.5.4 Linux kernel 3.5.3 Linux kernel 3.5.2 Linux kernel 3.5.1 Linux kernel 3.4.88 Linux kernel 3.4.87 Linux kernel 3.4.86 Linux kernel 3.4.80 Linux kernel 3.4.76 Linux kernel 3.4.73 Linux kernel 3.4.72 Linux kernel 3.4.71 Linux kernel 3.4.64 Linux kernel 3.4.58 Linux kernel 3.4.42 Linux kernel 3.4.36 Linux kernel 3.4.32 Linux kernel 3.4.31 Linux kernel 3.4.27 Linux kernel 3.4.26 Linux kernel 3.4.25 Linux kernel 3.4.21 Linux kernel 3.4.20 Linux kernel 3.4.19 Linux kernel 3.4.18 Linux kernel 3.4.17 Linux kernel 3.4.16 Linux kernel 3.4.15 Linux kernel 3.4.14 Linux kernel 3.4.13 Linux kernel 3.4.12 Linux kernel 3.4.11 Linux kernel 3.4.10 Linux kernel 3.4.9 Linux kernel 3.4.8 Linux kernel 3.4.7 Linux kernel 3.4.6 Linux kernel 3.4.5 Linux kernel 3.4.4 Linux kernel 3.4.3 Linux kernel 3.4.2 Linux kernel 3.4.1 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.72 Linux kernel 3.2.62 Linux kernel 3.2.57 Linux kernel 3.2.56 Linux kernel 3.2.51 Linux kernel 3.2.24 Linux kernel 3.2.23 Linux kernel 3.2.13 Linux kernel 3.2.12 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 3.1.8 Linux kernel 3.0.98 Linux kernel 3.0.75 Linux kernel 3.0.72 Linux kernel 3.0.69 Linux kernel 3.0.65 Linux kernel 3.0.60 Linux kernel 3.0.59 Linux kernel 3.0.58 Linux kernel 3.0.37 Linux kernel 3.0.34 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 4.9.9 Linux kernel 4.9.11 Linux kernel 4.9 Linux kernel 4.8.7 Linux kernel 4.8.6 Linux kernel 4.8.3 Linux kernel 4.8.13 Linux kernel 4.8.12 Linux kernel 4.8.1 Linux kernel 4.8 Linux kernel 4.7.9 Linux kernel 4.6.3 Linux kernel 4.6.2 Linux kernel 4.6.1 Linux kernel 4.6 Linux kernel 4.5.5 Linux kernel 4.5 Linux kernel 4.4.38 Linux kernel 4.4.26 Linux kernel 4.4.14 Linux kernel 4.4.1 Linux kernel 4.4 Linux kernel 4.3.3 Linux kernel 4.2.8 Linux kernel 4.2 Linux kernel 4.12 Linux kernel 4.11 Linux kernel 4.10.9 Linux kernel 4.10.8 Linux kernel 4.10.7 Linux kernel 4.10.5 Linux kernel 4.10.3 Linux kernel 4.10.2 Linux kernel 4.10.11 Linux kernel 4.10.1 Linux kernel 4.1.15 Linux kernel 4.1 Linux kernel 4.0.5 Linux kernel 4.0 Linux kernel 3.9.8 Linux kernel 3.9.4 Linux kernel 3.9-rc8 Linux kernel 3.9-rc7 Linux kernel 3.9-rc3 Linux kernel 3.9 Linux kernel 3.8-rc1 Linux kernel 3.8 Linux kernel 3.7.6 Linux kernel 3.7-rc1 Linux kernel 3.7 Linux kernel 3.6 Linux kernel 3.5-rc1 Linux kernel 3.5 Linux kernel 3.4.93 Linux kernel 3.4.81 Linux kernel 3.4.70 Linux kernel 3.4.67 Linux kernel 3.4.29 Linux kernel 3.4 Linux kernel 3.3 Linux kernel 3.2.65 Linux kernel 3.2.64 Linux kernel 3.2.63 Linux kernel 3.2.60 Linux kernel 3.2.55 Linux kernel 3.2.54 Linux kernel 3.2.53 Linux kernel 3.2.52 Linux kernel 3.2.50 Linux kernel 3.2.44 Linux kernel 3.2.42 Linux kernel 3.2.38 Linux kernel 3.2.2 Linux kernel 3.2 Linux kernel 3.19 Linux kernel 3.18.9 Linux kernel 3.18 Linux kernel 3.17.6 Linux kernel 3.17 Linux kernel 3.16.6 Linux kernel 3.16 Linux kernel 3.15-rc3 Linux kernel 3.15-rc2 Linux kernel 3.15-rc1 Linux kernel 3.15 Linux kernel 3.14.73 Linux kernel 3.14.7 Linux kernel 3.14.5 Linux kernel 3.14-4 Linux kernel 3.14-1 Linux kernel 3.14 Linux kernel 3.13.7 Linux kernel 3.13.6 Linux kernel 3.13.5 Linux kernel 3.13.4 Linux kernel 3.13.0 Linux kernel 3.13 Linux kernel 3.12.22 Linux kernel 3.12.15 Linux kernel 3.12.14 Linux kernel 3.12.12 Linux kernel 3.12.1 Linux kernel 3.12 Linux kernel 3.11.9 Linux kernel 3.11.6 Linux kernel 3.11 Linux kernel 3.10.5 Linux kernel 3.10.43 Linux kernel 3.10.31 Linux kernel 3.10.20 Linux kernel 3.10.17 Linux kernel 3.10 Linux kernel 3.1 Linux kernel 3.0.66 Linux kernel 3.0.62 Linux kernel 3.0.18 Linux kernel 3.0-rc1 Linux kernel 3.0 codeaurora QRD Android 0 codeaurora Firefox OS for MSM 0 codeaurora Android for MSM 0
Not Vulnerable:

Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities

The Linux kernel is prone to multiple local buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.

Local attackers can exploit these issues to run arbitrary code with elevated privileges. Failed exploit attempts can crash the affected kernel, denying service to legitimate users.

Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel CVE-2017-8244 Multiple Local Buffer Overflow Vulnerabilities

References:

• Buffer overflow in msm_vidc debugfs driver core_info_read and inst_info_read (CV (CodeAurora)
  
• Linux kernel Homepage (kernel.org)
  
• msm: vidc: Protect debug_buffer access in core_info_read with lock. (CodeAurora)
  
• msm: vidc: Protect debug_buffer access in core_info_read with lock. (CodeAurora)
  
• msm: vidc: Protect debug_buffer access in info_read with lock (CodeAurora)