Bug 617512 (CVE-2017-5970)

Summary:	Kernel CVE-2017-5970 Invalid IP options could cause skb->dst drop
Product:	Gentoo Security	Reporter:	Volkan <vBugZilla>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugzilla.redhat.com/show_bug.cgi?id=1421638
Whiteboard:
Package list:		Runtime testing required:	---

Description Volkan 2017-05-04 18:38:18 UTC

A vulnerability was found in the Linux kernel. A remote attacker that can send packets containing malicious IP options could cause the ipv4_pktinfo_prepare() function to drop/free the dst. This could result in a system crash or possible privilege escalation if the attacker is able to place crafted objects in this dropped location.

Upstream patch:

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=34b2cef20f19c87999fff3da4071e66937db9644

References:

http://seclists.org/oss-sec/2017/q1/414
https://patchwork.ozlabs.org/patch/724136/

Comment 1 John Helmert III archtester

2022-03-25 23:01:20 UTC

Fix in 4.9.11 onward