CVE-2017-9986
HighSummary
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a 'double fetch' vulnerability.
Risk Assessment
This vulnerability may lead to denial of service, affecting system availability. There is also a risk of unspecified impact on system stability and security.
Recommendation
It is recommended to update the Linux kernel to version 4.11.8 or later to mitigate this vulnerability.
Other vulnerabilities in Linux kernel (versions up to 4.11.7)
See all- CVE-2017-9985High
The snd_msndmidi_input_read function in the Linux kernel through version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
- CVE-2017-9984High
The snd_msnd_interrupt function in the Linux kernel up to version 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, known as a 'double fetch' vulnerability.
Original NVD description (English source)
The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boundary access) or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that value, aka a "double fetch" vulnerability.