Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)

Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)
Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)

Release date:
Updated on:

Affected Systems:

Linux kernel 4.9.x－4.9.71

Description:

Bugtraq id: 102321
CVE (CAN) ID: CVE-2017-17863

Linux Kernel is the Kernel of the Linux operating system.

Linux kernel 4.9.x-4.9.71, kernel/bpf/verifier. c does not check the relationship between pointer values and BPF stacks, so that local users can exploit this vulnerability to cause DoS (integer overflow or invalid memory access ).

<* Source: Jann Horn
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://www.spinics.net/lists/stable/msg206985.html
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1529123
Https://access.redhat.com/security/cve/cve-2017-17863
Http://www.kernel.org/
Https://anonscm.debian.org/cgit/kernel/linux.git/tree/debian/patches/bugfix/all/bpf-reject-out-of-bounds-stack-pointer-calculation.patch? H = stretch-security

Install Kernel 4.15 RC5 on Ubuntu, Linux Mint, and other derivative versions

Install Linux Kernel 4.9.26 on Ubuntu

Ubuntu 16.04.2 install Linux kernel 4.10 kernel and solve VMware Problems

Linux Kernel 4.2.2 compilation and installation tutorial

Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel

Linux Kernel 5.0 will be released in the summer of 2018

Install Linux Kernel 4.10.1 In Ubuntu, Linuxmint, and derivative versions

Linux Kernel 4.15 will be released within two weeks. RC7 is released today

Linux Kernel: click here
Linux Kernel: click here