CVE-2017-15129
Description
A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
How to fix
- linux linux_kernel4.14.11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.0 ≤ v < 4.14.11, 4.15 | 4.14.11 |
| fedoraproject fedora | 27 | — |
| canonical ubuntu_linux | 14.04, 16.04, 17.10 | — |
| redhat enterprise_linux | 7.0 | — |
| redhat enterprise_linux_compute_node_eus | 7.4 | — |
| redhat enterprise_linux_desktop | 7.0 | — |
| redhat enterprise_linux_eus | 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_for_ibm_z_systems | 7.0 | — |
| redhat enterprise_linux_for_ibm_z_systems_eus | 7.4 | — |
| redhat enterprise_linux_for_power_big_endian | 7.0 | — |
| redhat enterprise_linux_for_power_big_endian_eus | 7.4 | — |
| redhat enterprise_linux_for_power_little_endian_eus | 7.4 | — |
| redhat enterprise_linux_for_real_time | 7.0 | — |
| redhat enterprise_linux_for_real_time_for_nfv | 7 | — |
| redhat enterprise_linux_for_scientific_computing | 7.0 | — |
| redhat enterprise_linux_server | 7.0 | — |
| redhat enterprise_linux_server_aus | 7.4 | — |
| redhat enterprise_linux_server_tus | 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_server_update_services_for_sap_solutions | 7.4 | — |
| redhat enterprise_linux_workstation | 7.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.