CVE-2017-18595

HIGH7.8

An issue was discovered in the Linux kernel before 4

Published Sep 4, 2019

Modified 1 years ago

Details

An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c.

References

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html

ADVISORY

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html

WEB

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11

WEB

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4397f04575c44e1440ec2e49b6302785c95fd2f8

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2017-18595

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedSep 4, 2019

ModifiedAug 5, 2024

CVE-2017-18595 | Mondoo Vulnerability Intelligence