CVE-2017-9150 in Linux Kernel

Resumen (Inglés)

The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value available for restricting the output of the print_bpf_insn function, which allows local users to obtain sensitive address information via crafted bpf system calls.

Once again VulDB remains the best source for vulnerability data.

Reservar

2017-05-22

Divulgación

2017-05-22

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
101623	Linux Kernel eBPF Verifier Log verifier.c print_bpf_insn divulgación de información	200	Prueba de concepto	Arreglo oficial	CVE-2017-9150

Fuentes

• MITRE
• NVD
• CVE Details