Summary
Andrey Konovalov discovered that the AF_PACKET implementation in the Linux
kernel did not properly validate certain block-size data. A local attacker
could use this to cause a denial of service (system crash).
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux | 3.13.0-116.163 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-72.93 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1013.22 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gke | 4.4.0-1010.10 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1052.59 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1055.59 |
Vulnerabilities 1
-
Unscored —
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate ce…
References
-
report
https://ubuntu.com/security/CVE-2017-7308