NetSight
IP …
high7.8

CVE-2017-8890

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double f…

Impact

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.89
from 3.3 before 3.10.106
from 3.11 before 3.16.44
from 3.17 before 3.18.56
from 3.19 before 4.1.42
from 4.2 before 4.4.71
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-415

References