peter bassill · operator
$ cve CVE-2017-11176 JSON

CVE-2017-11176 EXPLOIT

7.8
HIGH · CVSS 3.1 · EPSS 3.8% (pctl 90)

Patch early

A public exploit exists.

Description

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS3.82% — more likely to be exploited than 90% of all CVEs
WeaknessCWE-416
On CISA KEVno
Public exploityes
Published2017-07-11
Last modified2026-06-17

Affected (2)

VendorProduct
debiandebian linux
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel < 4.11.8 - 'mq_notify: double sock_put()' Local Privilege Escalation2018-10-02

References

→ the Explorer  ·  watch your stack  ·  NVD