CVE-2017-9985
HighSummary
The snd_msndmidi_input_read function in the Linux kernel through version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
Risk Assessment
This vulnerability may lead to denial of service, affecting system availability. There is also a risk of unspecified impact on system stability and security.
Recommendation
It is recommended to update the Linux kernel to a version that is not vulnerable to this flaw. Additionally, monitor systems for unauthorized changes to message queue pointers.
Other vulnerabilities in Linux kernel (versions up to 4.11.7)
See all- CVE-2017-9986High
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a 'double fetch' vulnerability.
- CVE-2017-9984High
The snd_msnd_interrupt function in the Linux kernel up to version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
Original NVD description (English source)
The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.