Linux Kernel Local Denial of Service Vulnerability (CVE-2017-18222)

Linux Kernel Local Denial of Service Vulnerability (CVE-2017-18222)
Linux Kernel Local Denial of Service Vulnerability (CVE-2017-18222)

Release date:
Updated on:

Affected Systems:

Linux kernel <4.12

Description:

Bugtraq id: 103349
CVE (CAN) ID: CVE-2017-18222

Linux Kernel is the Kernel of the Linux operating system.

In versions earlier than Linux kernel 4.12, When retrieving sset_count data, HNS does not consider the ETH_SS_PRIV_FLAGS instance. A security vulnerability exists in implementation, allowing local users to exploit this vulnerability to cause DoS (memory depletion ).

<* Source: vendor
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87c
Http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit? Id = 412b65d15a7f8a94253968308fc100f2aa87c

This article permanently updates link: https://www.bkjia.com/Linux/2018-03/151415.htm