[kernel-sec-discuss] r5748 - active

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Nov 29 05:57:38 UTC 2017


Author: carnil
Date: 2017-11-29 05:57:38 +0000 (Wed, 29 Nov 2017)
New Revision: 5748

Added:
   active/CVE-2017-17052
Log:
Add CVE-2017-17052

Added: active/CVE-2017-17052
===================================================================
--- active/CVE-2017-17052	                        (rev 0)
+++ active/CVE-2017-17052	2017-11-29 05:57:38 UTC (rev 5748)
@@ -0,0 +1,12 @@
+Description: fork: fix incorrect fput of ->exe_file causing use-after-free
+References:
+Notes:
+Bugs:
+upstream: released (4.13-rc7) [2b7e8665b4ff51c034c55df3cff76518d1a9ee3a]
+4.9-upstream-stable: released (4.9.46) [b65b6ac52e0f8694aa3a4402d5f766b2bb9e94ef]
+3.16-upstream-stable: N/A "Introduced in 4.7-rc1 with 7c051267931a9be9c6620cc17b362bc6ee6dedc8"
+3.2-upstream-stable: N/A "Introduced in 4.7-rc1 with 7c051267931a9be9c6620cc17b362bc6ee6dedc8"
+sid: released (4.12.12-1)
+4.9-stretch-security: released (4.9.47-1)
+3.16-jessie-security: N/A "Vulnerable code not present"
+3.2-wheezy-security: N/A "Vulnerable code not present"




More information about the kernel-sec-discuss mailing list