NVD Vulnerability Detail

CVE-2017-15126

Summary	A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
Publication Date	Jan. 14, 2018, 3:29 p.m.
Registration Date	Jan. 26, 2021, 1:16 p.m.
Last Update	Nov. 21, 2024, 12:14 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::		4.11			4.13.6

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252	Vendor Advisory
2	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252	Vendor Advisory
3	http://www.securityfocus.com/bid/102516	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/102516	Third Party Advisory VDB Entry
5	https://access.redhat.com/errata/RHSA-2018:0676	Third Party Advisory
6	https://access.redhat.com/errata/RHSA-2018:0676	Third Party Advisory
7	https://access.redhat.com/errata/RHSA-2018:1062	Third Party Advisory
8	https://access.redhat.com/errata/RHSA-2018:1062	Third Party Advisory
9	https://access.redhat.com/security/cve/CVE-2017-15126	Third Party Advisory
10	https://access.redhat.com/security/cve/CVE-2017-15126	Third Party Advisory
11	https://bugzilla.redhat.com/show_bug.cgi?id=1523481	Issue Tracking Third Party Advisory
12	https://bugzilla.redhat.com/show_bug.cgi?id=1523481	Issue Tracking Third Party Advisory
13	https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252	Third Party Advisory
14	https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252	Third Party Advisory
15	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6	Vendor Advisory
16	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6	Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

Linux Kernel における解放済みメモリの使用に関する脆弱性

Title	Linux Kernel における解放済みメモリの使用に関する脆弱性
Summary	Linux Kernel には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 12, 2017, midnight
Registration Date	Feb. 22, 2018, 11:53 a.m.
Last Update	Feb. 22, 2018, 11:53 a.m.

Affected System

Linux

Linux Kernel 4.13.6 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-15126	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15126
National Vulnerability Database (NVD)
2	CVE-2017-15126	https://nvd.nist.gov/vuln/detail/CVE-2017-15126

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
ChangeLog
1	ChangeLog-4.13.6	https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6
GitHub
2	userfaultfd: non-cooperative: fix fork use after free	https://github.com/torvalds/linux/commit/384632e67e0829deb8015ee6ad916b180049d252
Linux Kernel
3	Linux Kernel Archives	http://www.kernel.org
Linux kernel source tree
4	userfaultfd: non-cooperative: fix fork use after free	https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=384632e67e0829deb8015ee6ad916b180049d252

Change Log

No	Changed Details	Date of change
1	[2018年02月22日] 掲載	Feb. 22, 2018, 11:53 a.m.