CVE-2017-11176

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic

published July 11, 2017

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03815 · 90.0th percentile
Published
2017-07-11T23:00Z
EPSS history
Timeline
  • 11 JUL 23:00Z
    The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic
    cvelistv5