UBUNTU-CVE-2017-5967

Details

The time subsystem in the Linux kernel through 4.9.9, when CONFIG_TIMER_STATS is enabled, allows local users to discover real PID values (as distinguished from PID values inside a PID namespace) by reading the /proc/timer_list file, related to the print_timer function in kernel/time/timer_list.c and the __timer_stats_timer_set_start_info function in kernel/time/timer.c.

Affected Packages(19 packages)

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-208.240

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1126.140

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1002.5

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.13.0-32.35~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1091.100

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1150.161

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1154.164

linux-snapdragon

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1053.57

linux-azure-fde

Ubuntu 20.04 LTS

Affected versions:

5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.15.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.1+16 more

linux-intel-iot-realtime

Ubuntu 22.04 LTS

Affected versions:

5.15.0-1073.75

References

REPORT

http://git.kernel.org/cgit/linux/kernel/git/tip/tip.git/commit/?id=dfb4357da6ddbdf57d583ba64361c9d792b0e0b1

REPORT

https://bugzilla.kernel.org/show_bug.cgi?id=193921

REPORT

https://ubuntu.com/security/CVE-2017-5967

ADVISORY

https://ubuntu.com/security/notices/USN-4904-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2017-5967