VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2017-18222
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-18222
CVSS severity score: 4.6/10.0
Description:
In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by zsm@chromium.org
, Mar 28 2018Labels: Security_Severity-Medium Security_Impact-None Pri-3
Owner: zsm@chromium.org
Status: WontFix (was: Untriaged)
The upstream patch is 412b65d("net: hns: fix ethtool_get_strings overflow in hns driver"). This patch is present in 4.14. CONFIG_HNS is not set in any of the kernels, marking as WontFix.