Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Geneblue

#35101of 56,330
7.8Total CVSS
Vulnerabilities · 1
PT-2017-2476
7.8
2017-07-09
Linux · Linux Kernel · CVE-2017-11176
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 4.11.9 **Description** The issue is related to the mq notify function in the Linux kernel, which does not set the sock pointer to NULL upon entry into the retry logic. This allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact during a user-space close of a Netlink socket. The vulnerability can be exploited by a remote attacker to cause a denial of service or other impact. **Recommendations** For Linux kernel versions through 4.11.9, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.