Linux kernel CVE-2017-11176 : mq_notify function Denial of Service Vulnerability
by CIRT Team
Description: The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
Impact: An attacker can exploit this issue to cause denial-of-service condition.
Mitigation: Updates are available. Please check specific vendor advisory for more information.
26 Oct 2023 - Security Advisories & Alerts