Wind River Support Network

HomeDefectsLIN9-7751
Fixed

LIN9-7751 : Security Advisory - linux - CVE-2018-9517

Created: Nov 15, 2018    Updated: Jan 14, 2019
Resolved Date: Dec 24, 2018
Found In Version: 9.0.0.19
Fix Version: 9.0.0.20
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Kernel

Description

A race condition between pppol2tp_session_create() and l2tp_eth_create() in net/l2tp/l2tp_netlink.c in the Linux kernel. Calling l2tp_tunnel_find() may result in a new tunnel being created with tunnel id of a previous removed tunnel which wouldn't be protected by the reference counter.

https://nvd.nist.gov/vuln/detail/CVE-2018-9517 

CVEs


Live chat
Online