CVE-2017-17864

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

From the Ubuntu Security Team

Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel mishandled pointer data values in some situations. A local attacker could use this to to expose sensitive information (kernel memory).

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
linux-armadaxp	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-aws	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
linux-azure	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not affected
linux-euclid	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-flo	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Ignored abandoned
	14.04 LTS trusty	Not in release
linux-gcp	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-gke	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-goldfish	17.10 artful	Not in release
	17.04 zesty	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-grouper	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-hwe	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-hwe-edge	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-kvm	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-linaro-omap	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-linaro-shared	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-linaro-vexpress	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-quantal	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-raring	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-saucy	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-trusty	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-utopic	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-vivid	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Ignored end of life, was needs-triage
linux-lts-wily	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-lts-xenial	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not affected
linux-maguro	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-mako	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Ignored abandoned
	14.04 LTS trusty	Not in release
linux-manta	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-oem	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-qcm-msm	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release
linux-raspi2	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-snapdragon	17.10 artful	Not affected
	17.04 zesty	Not affected
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
linux-ti-omap4	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Introduced by f1174f7, fixed by 179d1c5

Severity score breakdown

Parameter	Value
Base score	3.3 · Low
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality	Low
Integrity impact	None
Availability impact	None
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

Related Ubuntu Security Notices (USN)

USN-3523-2
Linux kernel (HWE) vulnerabilities
10 January 2018

USN-3523-1
Linux kernel vulnerabilities
9 January 2018

USN-3523-3
Linux kernel (Raspberry Pi 2) vulnerabilities
10 January 2018