CVE-2017-9984
HighSummary
The snd_msnd_interrupt function in the Linux kernel up to version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
Risk Assessment
This vulnerability may lead to denial of service, affecting system availability. There is also a risk of unspecified impact on other aspects of system operation.
Recommendation
It is recommended to update the Linux kernel to version 4.11.8 or later to mitigate this vulnerability.
Other vulnerabilities in Linux kernel (versions up to 4.11.7)
See all- CVE-2017-9986High
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a 'double fetch' vulnerability.
- CVE-2017-9985High
The snd_msndmidi_input_read function in the Linux kernel through version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
Original NVD description (English source)
The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.