CVE-2017-15129

Severity
4.7MEDIUM
EPSS
0.1%
top 76.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 9
Latest updateMay 14

Description

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation ca

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6

Affected Packages7 packages

NVDlinux/linux_kernel4.04.14.11+1
CVEListV5linux_kernel_v4.0-rc1_through_v4.15-rc5Linux kernel v4.0-rc1 through v4.15-rc5
Debianlinux< 4.14.12-1+3

Also affects: Ubuntu Linux 14.04, 16.04, 17.10, Enterprise Linux 7.0, 7.4, 7.6, 7.7, 7, Fedora 27

Patches

🔴Vulnerability Details

4
GHSA
GHSA-9324-w9gg-mxf6: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 42022-05-14
OSV
linux-azure vulnerabilities2018-04-24
OSV
CVE-2017-15129: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 42018-01-09
CVEList
CVE-2017-15129: A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 42018-01-09

📋Vendor Advisories

8
Ubuntu
Linux kernel (Azure) vulnerabilities2018-04-24
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities2018-04-05
Ubuntu
Linux kernel vulnerabilities2018-04-04
Ubuntu
Linux kernel (Raspberry Pi 2) vulnerabilities2018-04-04
Ubuntu
Linux kernel vulnerabilities2018-04-03

💬Community

2
Bugzilla
CVE-2017-15129 kernel: net: double-free and memory corruption in get_net_ns_by_id() [fedora-all]2018-01-05
Bugzilla
CVE-2017-15129 kernel: net: double-free and memory corruption in get_net_ns_by_id()2018-01-04