Summary
Alexander Popov discovered that the N_HDLC line discipline implementation
in the Linux kernel contained a double-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly gain
administrative privileges.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-66.87 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gke | 4.4.0-1005.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1046.53 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1050.54 |
Vulnerabilities 1
-
Unscored —CVE-2017-2636 Public exploit
Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or caus…
References
-
report
https://ubuntu.com/security/CVE-2017-2636