The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circumstances, which allows local users to cause a denial of service (BUG_ON) or possibly have unspecified other impact via crafted system calls.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/96510 | vdb entry |
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8b74d439e1697110c5e5c600643e823eb1dd0762 | patch |
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13 | patch release notes |
https://usn.ubuntu.com/3754-1/ | vendor advisory |
https://github.com/torvalds/linux/commit/8b74d439e1697110c5e5c600643e823eb1dd0762 | patch |
http://www.openwall.com/lists/oss-security/2017/02/28/7 | patch mailing list third party advisory |
http://www.debian.org/security/2017/dsa-3804 | vendor advisory |