Linux Kernel 'kernel/bpf/verifier. c' local information leakage (CVE-2017-17864)

Linux Kernel 'kernel/bpf/verifier. c' local information leakage (CVE-2017-17864)
Linux Kernel 'kernel/bpf/verifier. c' local information leakage (CVE-2017-17864)

Release date:
Updated on:

Affected Systems:

Linux kernel <= 4.14.8

Description:

Bugtraq id: 102320
CVE (CAN) ID: CVE-2017-17864

Linux Kernel is the Kernel of the Linux operating system.

Linux kernel <= 4.14.8, kernel/bpf/verifier. c does not properly process states_equal comparison between pointer data types and UNKNOWN_VALUE data types, so that local users can exploit this vulnerability to obtain sensitive address information.

<* Source: vendor
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1529120
Https://anonscm.debian.org/cgit/kernel/linux.git/commit? H = stretch-security & id = ad775f6ff7eebb93eedc2f592bc97417e7757b0
Https://access.redhat.com/security/cve/cve-2017-17864
Https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-verifier-fix-states_equal-comparison-of-pointer-and-unknown.patch? H = stretch-security

Install Kernel 4.15 RC5 on Ubuntu, Linux Mint, and other derivative versions

Install Linux Kernel 4.9.26 on Ubuntu

Ubuntu 16.04.2 install Linux kernel 4.10 kernel and solve VMware Problems

Linux Kernel 4.2.2 compilation and installation tutorial

Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel

Linux Kernel 5.0 will be released in the summer of 2018

Install Linux Kernel 4.10.1 In Ubuntu, Linuxmint, and derivative versions

Linux Kernel 4.15 will be released within two weeks. RC7 is released today

Linux Kernel: click here
Linux Kernel: click here