Description
A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. An empty (null) write to this file can crash the system by causing the system to attempt to access unmapped kernel memory.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux kernel
4.9.10affected
References
- https://marc.info/?l=selinux&m=148588165923772&w=2 ↗
- https://www.debian.org/security/2017/dsa-3791 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2618 ↗
- https://access.redhat.com/errata/RHSA-2017:0932 ↗
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0c461cb727d146c9ef2d3e86214f498b78b7d125 ↗
- https://access.redhat.com/errata/RHSA-2017:0933 ↗
- https://access.redhat.com/errata/RHSA-2017:0931 ↗
- http://www.securityfocus.com/bid/96272 ↗