CVE-2017-18344

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.8

Description: The issue arises from improper validation of the sigevent->sigev notify field in the timer create syscall implementation. This leads to out-of-bounds access when the show timer function is called, such as when the /proc/$PID/timers endpoint is read. As a result, userspace applications can read arbitrary kernel memory, but only on kernels built with CONFIG POSIX TIMERS and CONFIG CHECKPOINT RESTORE.

Recommendations: For Linux kernel versions prior to 4.14.8, update to version 4.14.8 or later to resolve the issue.