NetSight
IP …
high7.8Public exploit code

CVE-2017-11176

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.92
from 3.3 before 3.16.47
from 3.17 before 3.18.61
from 3.19 before 4.1.43
from 4.2 before 4.4.77
from 4.5 before 4.9.38
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-416

References