UBUNTU-CVE-2017-2618

Description

A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.

CVSS Metrics

• v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Systems

• ubuntu•linux

  < 3.13.0-126.175 | < 4.4.0-67.88

• ubuntu•linux-aws

  < 4.4.0-1009.18

• ubuntu•linux-azure-fde

  all

• ubuntu•linux-gke

  all

• ubuntu•linux-hwe

  < 4.10.0-32.36~16.04.1

• ubuntu•linux-intel-iot-realtime

  all

• ubuntu•linux-lts-xenial

  < 4.4.0-67.88~14.04.1

• ubuntu•linux-raspi-realtime

  all

• ubuntu•linux-raspi2

  < 4.4.0-1048.55 | all

• ubuntu•linux-realtime

  all

• ubuntu•linux-riscv

  all | all

• ubuntu•linux-snapdragon

  < 4.4.0-1051.55

References (5)

• https://ubuntu.com/security/CVE-2017-2618
• https://ubuntu.com/security/notices/USN-3361-1
• https://ubuntu.com/security/notices/USN-3381-1
• https://ubuntu.com/security/notices/USN-3381-2
• https://www.cve.org/CVERecord?id=CVE-2017-2618