Linux Kernel CVE-2017-1000371 Local Security Bypass Vulnerability

Bugtraq ID:	99131
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-1000371
Remote:	No
Local:	Yes
Published:	Jun 19 2017 12:00AM
Updated:	Sep 25 2017 10:00AM
Credit:	Qualys Research Labs
Vulnerable:	Linux kernel 4.11.5 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Linux Kernel CVE-2017-1000371 Local Security Bypass Vulnerability

Linux Kernel is prone to a local security-bypass vulnerability.

Attackers may be able to exploit this issue to bypass security restrictions and perform unauthorized actions.

Linux Kernel 4.11.5 version is vulnerable.

Linux Kernel CVE-2017-1000371 Local Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel CVE-2017-1000371 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel CVE-2017-1000371 Local Security Bypass Vulnerability

References:

• Linux kernel Homepage (kernel.org)
  
• Bug 1462158 - (CVE-2017-1000371) CVE-2017-1000371 kernel: offset2lib allows for (Red Hat)
  
• CVE-2017-1000371 (Red Hat)
  
• Qualys Security Advisory (Qualys )