Published: 01/03/2017 Updated: 21/06/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Race condition in net/packet/af_packet.c in the Linux kernel prior to 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or have other impacts CVE-2016-9588 Jim Mattson discovered that the KVM implementation for Intel x86 processors does not properly handle #BP and #OF exceptions in an L2 (nested) virtual machine A local attacker ...

Several security issues were fixed in the Linux kernel ...

Several security issues were fixed in the kernel ...

Race condition in net/packet/af_packetc in the Linux kernel allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls ...

CWE-362 CWE-416 https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164b http://www.openwall.com/lists/oss-security/2017/02/28/6 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164b http://www.securityfocus.com/bid/96508 https://source.android.com/security/bulletin/2017-09-01 http://www.debian.org/security/2017/dsa-3804 https://nvd.nist.gov https://www.debian.org/security/./dsa-3804 https://usn.ubuntu.com/3422-2/

CVE-2017-6346

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect