Sploitus

CVE-2017-11176

15 known exploits for CVE-2017-11176

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

Affected products
Alt Linux, Centos, Linux Kernel, Red Hat, Suse, Ubuntu
Linux Linux Kernel
< 3.2.92, 3.16.47, 3.18.61, 4.1.43, 4.4.77, 4.9.38, 4.11.11, 4.12.2
CVSS 3.1
7.8 HIGH
EPSS
3.6% (89th percentile)
Weakness
CWE-416
NVD status
Modified
Published
2017-07-11
CVE-2017-11176 at NVD
Authoritative description, scoring and affected products

15 known exploits for CVE-2017-11176

Proof-of-concept code and exploit modules indexed by Sploitus

cve-2017-11176
2026-08-27 KitPloitKITPLOIT
CVE-2017-11176
2026-08-26 KitPloitKITPLOIT
CVE-2017-11176
2026-08-26 KitPloitKITPLOIT
CVE-2017-11176
2026-08-26 KitPloitKITPLOIT
cve-2017-11176
2026-08-26 KitPloitKITPLOIT
cve-2017-11176
2026-08-26 KitPloitKITPLOIT
kernel-exploit-factory
2026-08-21 KitPloitKITPLOIT
Exploit for Race Condition in Linux Linux_Kernel
2021-12-23 pjlantzGITHUB
Exploit for Improper Access Control in Xen
2021-08-14 蒲公英之流GITEE
Exploit for Improper Input Validation in Linux Linux_Kernel
2020-05-08 c3r34lk1ll3rGITHUB
Linux Kernel < 4.11.8 - mq_notify: double sock_put() Local Privilege Escalation Exp
2018-10-09 LexfoZDTC
Linux Kernel 4.11.8 - mq_notify: double sock_put() Local Privilege Escalation
2018-10-02 LexfoEXPLOITPACKC
Linux Kernel < 4.11.8 - 'mq_notify: double sock_put()' Local Privilege Escalation
2018-10-02 LexfoEXPLOITDBC
Exploit for Use After Free in Linux Linux_Kernel
2018-10-02 lexfoGITHUB
A Red Teamer’s guide to pivoting
2017-03-23 Exploit-DBEXPLOITDBC