Wind River Support Network


LIN6-14096 : Security Advisory - linux - CVE-2017-17712

Created: Dec 18, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 3, 2018
Found In Version: 6.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Kernel


The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

Steps to Reproduce


Other Downloads

Live chat