Linux kernel information disclosure vulnerability (CNVD-2017-38519)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. An information disclosure vulnerability exists in Linux kernel versions 4.14.8 and earlier. The vulnerability arises...

CVE-2017-17863

CVE-2017-17863 affects the Linux kernel 4.9.x up to 4.9.71, where the BPF verifier in kernel/bpf/verifier.c fails to check the relationship between pointer values and the BPF stack. This can allow local users to trigger a denial of service (integer overflow or invalid memory access) or potentiall...

CVE-2017-17863

kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service integer overflow or invalid memory access or possibly have unspecified other impact...

CVE-2017-17857

The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations...

CVE-2017-17857

The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations...

CVE-2017-17852

CVE-2017-17852 affects the Linux kernel’s BPF verifier (kernel/bpf/verifier.c) up to version 4.14.8. The root cause is mishandling of 32-bit ALU operations, which can allow local users to cause a denial of service (memory corruption) and possibly other impact. The connected Nessus entries repeat ...

CVE-2017-17855

CVE-2017-17855 affects Linux kernel versions up to 4.14.8 in kernel/bpf/verifier.c, where improper use of pointers in place of scalars allows local users to cause a denial of service via memory corruption (impact described as high). The provided documents do not supply a confirmed exploit, mitiga...

CVE-2017-17853

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect BPFRSH signed bounds calculations...

CVE-2017-17852

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops...

CVE-2017-17853

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect BPFRSH signed bounds calculations...

CVE-2017-17856

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement...

PT-2017-15047

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, by leveraging incorrect BPF RSH signed bounds calculations in the kernel/bpf/verifier.c fil...

PT-2017-15048

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, which may include integer overflow and memory corruption, or possibly have other unspecified impacts. This is achieved by leveraging...

PT-2017-15049

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.8 Description The issue allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars in the...

PT-2017-15050

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. This is due to the lack of stack-pointer...

PT-2017-15055

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.9 Description The issue allows local users to obtain potentially sensitive address information due to a "pointer leak" caused by mishandling states equal comparisons between the pointer data type and the...

PT-2017-15053

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.9 Description The issue is related to the Linux kernel's handling of unreachable code in the kernel/bpf/verifier.c component. This behavior is also considered an improper branch-pruning logic issue. It could...

PT-2017-14669

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. This is achieved by leveraging register...

PT-2017-14668

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue is related to the check alu op function in kernel/bpf/verifier.c, which allows local users to cause a denial of service or possibly have other unspecified impacts by leveraging incorrect...

CVE-2017-3196

PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform operations on memory outside of its typical bounds on the driver's receipt of network packets. Local attackers can exploit this issue to execute arbitrary code with SYSTEM privileges...