CVE-2017-16996

Published: 12/22/2017 Last updated: 8/5/2024 Reserved: 11/27/2017

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging register truncation mishandling.

CNA assigner: debian (79363d38-fa19-49d1-9214-5f28da3f3ac5) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (1)

Product	Vendor	Version
Linux kernel through 4.14.8	n/a	23.0 ap377755

References (10)

https://bugs.chromium.org/p/project-zero/issues/detail?id=1454
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958
https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958
http://www.securityfocus.com/bid/102267
http://openwall.com/lists/oss-security/2017/12/21/2
https://bugs.chromium.org/p/project-zero/issues/detail?id=1454
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0c17d1d2c61936401f4702e1846e2c19b200f958
https://github.com/torvalds/linux/commit/0c17d1d2c61936401f4702e1846e2c19b200f958
http://www.securityfocus.com/bid/102267
http://openwall.com/lists/oss-security/2017/12/21/2