The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IPX interface.
Product | Vendor | Version |
---|---|---|
Linux kernel through 4.11.1 | n/a | < 64e4c45d23cd7f6167f69cc2d2877bc7f54292e5 |