p PatchFirst

CVE-2017-15126

CVE-2017-15126

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().

CVSS 8.1 · High · EPSS 4.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • linux kernel before 4.13.6

    Versions
    • Linux Kernel before 4.13.6: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.13.10-1

    Update to 4.13.10-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.13.10-1

    Update to 4.13.10-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.13.10-1

    Update to 4.13.10-1

  • linux-azure Ubuntu:16.04:LTS

    Versions
    • 4.11.0-1009.9
    • 4.11.0-1011.11
    • 4.11.0-1013.13
    • 4.11.0-1014.14
    • 4.11.0-1015.15
    • 4.11.0-1016.16
    Affected ranges
    • ECOSYSTEM: < 4.13.0-1005.7

    Update to 4.13.0-1005.7

Original sources

Check your server →