ID CVE-2017-15126
Summary A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().
References
Vulnerable Configurations
  • cpe:2.3:o:linux:linux_kernel:4.13.6
    cpe:2.3:o:linux:linux_kernel:4.13.6
CVSS
Base: 9.3
Impact:
Exploitability:
CWE CWE-416
CAPEC
refmap via4
misc
Last major update 14-01-2018 - 01:29
Published 14-01-2018 - 01:29
Last modified 06-02-2018 - 07:48
Back to Top