linux-kernel-exploits/2017/CVE-2017-16939

CVE-2017-16939

来源: SSD Advisory – Linux Kernel XFRM Privilege Escalation

漏洞概要

The following advisory describes a Use-after-free vulnerability found in Linux kernel that can lead to privilege escalation. The vulnerability found in Netlink socket subsystem – XFRM.

Netlink is used to transfer information between the kernel and user-space processes. It consists of a standard sockets-based interface for user space processes and an internal kernel API for kernel modules.