CVE-2017-5546

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-5546
The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a large value for a random number.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f Issue Tracking Patch Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 Release Notes Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/21/3 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95711 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1415733 Issue Tracking Patch
https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f Issue Tracking Patch Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f Issue Tracking Patch Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 Release Notes Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/01/21/3 Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95711 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1415733 Issue Tracking Patch
https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f Issue Tracking Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 03:27

Type Values Removed Values Added
References () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - Issue Tracking, Patch, Third Party Advisory () http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - Issue Tracking, Patch, Third Party Advisory
References () http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 - Release Notes, Vendor Advisory () http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 - Release Notes, Vendor Advisory
References () http://www.openwall.com/lists/oss-security/2017/01/21/3 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2017/01/21/3 - Mailing List, Patch, Third Party Advisory
References () http://www.securityfocus.com/bid/95711 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/95711 - Third Party Advisory, VDB Entry
References () https://bugzilla.redhat.com/show_bug.cgi?id=1415733 - Issue Tracking, Patch () https://bugzilla.redhat.com/show_bug.cgi?id=1415733 - Issue Tracking, Patch
References () https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - Issue Tracking, Patch, Third Party Advisory () https://github.com/torvalds/linux/commit/c4e490cf148e85ead0d1b1c2caaba833f1d5b29f - Issue Tracking, Patch, Third Party Advisory

28 Feb 2023, 15:45

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:4.8.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.9.2:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.7:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.5:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.15:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.9.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.9:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.11:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.9.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.16:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.10:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.4:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.14:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.17:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.9:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.8:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.12:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.9.3:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.13:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:4.8.6:*:*:*:*:*:*:*		 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Information

Published : 2017-02-06 06:59

Updated : 2025-04-20 01:37

NVD link : CVE-2017-5546

Mitre link : CVE-2017-5546

CVE.ORG link : CVE-2017-5546

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo