CVE-2017-9150

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1

Description The issue concerns the do check function in the Linux kernel, which fails to restrict the output of sensitive address information. This allows local users to obtain sensitive address information via crafted bpf system calls. The do check function in kernel/bpf/verifier.c is specifically implicated, as it does not make the allow ptr leaks value available for restricting the output of the print bpf insn function.

Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue.