CVE

Id
99491  
CVE No.
CVE-2017-2671  
Status
Candidate  
Description
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.  
Phase
Assigned (20161201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
803265 99491 CVE-2017-2671 MLIST:[oss-security] 20170404 Re: Linux kernel ping socket / AF_LLC connect() sin_family race  View
803266 99491 CVE-2017-2671 URL:http://openwall.com/lists/oss-security/2017/04/04/8  View
803267 99491 CVE-2017-2671 MISC:https://github.com/danieljiang0415/android_kernel_crash_poc  View
803268 99491 CVE-2017-2671 MISC:https://twitter.com/danieljiang0415/status/845116665184497664  View
803269 99491 CVE-2017-2671 CONFIRM:https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/net/ipv4/ping.c?id=43a6684519ab0a6c52024b5e25322476cabad893  View
803270 99491 CVE-2017-2671 CONFIRM:https://github.com/torvalds/linux/commit/43a6684519ab0a6c52024b5e25322476cabad893  View
803271 99491 CVE-2017-2671 BID:97407  View

Related JVN