Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)

Source: Internet
Author: User
Tags cve linux mint

Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)
Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)


Release date:
Updated on:

Affected Systems:

Linux kernel 4.9.x-4.9.71

Description:

Bugtraq id: 102321
CVE (CAN) ID: CVE-2017-17863

Linux Kernel is the Kernel of the Linux operating system.

Linux kernel 4.9.x-4.9.71, kernel/bpf/verifier. c does not check the relationship between pointer values and BPF stacks, so that local users can exploit this vulnerability to cause DoS (integer overflow or invalid memory access ).

<* Source: Jann Horn
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.spinics.net/lists/stable/msg206985.html
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1529123
Https://access.redhat.com/security/cve/cve-2017-17863
Http://www.kernel.org/
Https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch? H = stretch-security

Install Kernel 4.15 RC5 on Ubuntu, Linux Mint, and other derivative versions

Install Linux Kernel 4.9.26 on Ubuntu

Ubuntu 16.04.2 install Linux kernel 4.10 kernel and solve VMware Problems

Linux Kernel 4.2.2 compilation and installation tutorial

Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel

Linux Kernel 5.0 will be released in the summer of 2018

Install Linux Kernel 4.10.1 In Ubuntu, Linuxmint, and derivative versions

Linux Kernel 4.15 will be released within two weeks. RC7 is released today

Linux Kernel: click here
Linux Kernel: click here

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.