Wind River Support Network

HomeDefectsLIN8-10077
Fixed

LIN8-10077 : Security Advisory - linux - CVE-2018-9517

Created: Nov 15, 2018    Updated: Jan 14, 2019
Resolved Date: Dec 27, 2018
Found In Version: 8.0.0.28
Fix Version: 8.0.0.29
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Kernel

Description

A race condition between pppol2tp_session_create() and l2tp_eth_create() in net/l2tp/l2tp_netlink.c in the Linux kernel. Calling l2tp_tunnel_find() may result in a new tunnel being created with tunnel id of a previous removed tunnel which wouldn't be protected by the reference counter.

https://nvd.nist.gov/vuln/detail/CVE-2018-9517 

CVEs


Live chat
Online