CVE-2017-8890

The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.

Affected products

Alt Linux, Centos, Linux Kernel, Red Hat, Suse, Ubuntu

Linux Linux Kernel

< 3.2.89, 3.10.106, 3.16.44, 3.18.56, 4.1.42, 4.4.71, 4.9.31, 4.11.4

Fix

Available

CVSS 3.1

7.8 HIGH

EPSS

1.4% (71th percentile)

Weakness

CWE-415

NVD status

Modified

Published

2017-05-10