CVE-2017-15129
- State
- Published
- Severity
- Not scored
- Published
- Jan 9, 2018
- Updated
- Aug 5, 2024
- Reserved
- Oct 8, 2017
Description
A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Linux kernel v4.0-rc1 through v4.15-rc5n/a |
|
References
- USN-3617-1vendor-advisory
- USN-3619-2vendor-advisory
- USN-3617-3vendor-advisory
- https://marc.info/?l=linux-netdev&m=151370451121029&w=2
- https://marc.info/?t=151370468900001&r=1&w=2
- USN-3632-1vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1531174
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11
- https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0
- RHSA-2018:1062vendor-advisory
- RHSA-2018:0654vendor-advisory
- https://access.redhat.com/security/cve/CVE-2017-15129
- 102485vdb-entry
- http://seclists.org/oss-sec/2018/q1/7
- RHSA-2018:0676vendor-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0
- USN-3617-2vendor-advisory
- USN-3619-1vendor-advisory
- RHSA-2019:1946vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.