CVE-2017-9986
published 2017-06-28CVE-2017-9986: The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or…
PriorityP431high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.36%
29.0th percentile
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.15.4-1 (bookworm) | linux 4.15.4-1 (bookworm) |
| linux | linux_kernel | <= 4.11.7 | — |
| linux | linux_kernel | >= 0 < 4.15.4-1 | 4.15.4-1 |
| linux | linux_kernel | >= 0 < 4.15.4-1 | 4.15.4-1 |
| linux | linux_kernel | >= 0 < 4.15.4-1 | 4.15.4-1 |
| linux | linux_kernel | >= 0 < 4.15.4-1 | 4.15.4-1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8LOW
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c
vendor_redhat·2017-06-28·CVSS 7.8
CVE-2017-9986 [HIGH] CWE-416 kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c
kernel: Double fetch in the intr function in sound/oss/msnd_pinnacle.c
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-alt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: realtime-kernel (Red Hat Enterprise MRG 2) - Not affected
Debian
CVE-2017-9986: linux - The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11....
vendor_debian·2017·CVSS 7.8
CVE-2017-9986 [HIGH] CVE-2017-9986: linux - The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11....
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
Scope: local
bookworm: resolved (fixed in 4.15.4-1)
bullseye: resolved (fixed in 4.15.4-1)
forky: resolved (fixed in 4.15.4-1)
sid: resolved (fixed in 4.15.4-1)
trixie: resolved (fixed in 4.15.4-1)
GHSA
GHSA-q852-rrp3-mmg5: The intr function in sound/oss/msnd_pinnacle
ghsa_unreviewed·2022-05-17
CVE-2017-9986 [HIGH] CWE-125 GHSA-q852-rrp3-mmg5: The intr function in sound/oss/msnd_pinnacle
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
OSV
CVE-2017-9986: The intr function in sound/oss/msnd_pinnacle
osv·2017-06-28·CVSS 7.8
CVE-2017-9986 [HIGH] CVE-2017-9986: The intr function in sound/oss/msnd_pinnacle
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.
No detection rules found.
No public exploits indexed.
2017-06-28
Published