CVE-2017-17449
Published: 6 December 2017
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
From the Ubuntu Security Team
It was discovered that the netlink subsystem in the Linux kernel did not properly restrict observations of netlink messages to the appropriate net namespace. A local attacker could use this to expose sensitive information (kernel netlink traffic).
Priority
Status
| Package | Release | Status |
|---|---|---|
|
linux
Launchpad, Ubuntu, Debian |
artful |
Released
(4.13.0-43.48)
|
| bionic |
Not vulnerable
(4.15.0-10.11)
|
|
| trusty |
Released
(3.13.0-149.199)
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.4.0-119.143)
|
|
| zesty |
Ignored
(end of life)
|
|
|
Patches:
Introduced by
bcbde0d449eda7afa8f63280b165c8300dbd00e2
|
||
|
linux-armadaxp
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
| This package is not directly supported by the Ubuntu Security Team | ||
|
linux-aws
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1001.1)
|
|
| trusty |
Released
(4.4.0-1016.16)
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.4.0-1054.63)
|
|
| zesty |
Does not exist
|
|
|
linux-azure
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
| trusty |
Not vulnerable
(4.15.0-1023.24~14.04.1)
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.13.0-1018.21)
|
|
| zesty |
Does not exist
|
|
|
linux-euclid
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Ignored
(was needs-triage ESM criteria)
|
|
| zesty |
Does not exist
|
|
|
linux-flo
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Ignored
(abandoned)
|
|
| zesty |
Does not exist
|
|
|
linux-gcp
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1001.1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.13.0-1017.21)
|
|
| zesty |
Does not exist
|
|
|
linux-gke
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Ignored
(end of standard support, was needed)
|
|
| zesty |
Does not exist
|
|
|
linux-goldfish
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Not vulnerable
|
|
| zesty |
Not vulnerable
|
|
|
linux-grouper
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-hwe
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.13.0-43.48~16.04.1)
|
|
| zesty |
Does not exist
|
|
|
linux-hwe-edge
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Released
(4.18.0-8.9~18.04.1)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.13.0-43.48~16.04.1)
|
|
| zesty |
Does not exist
|
|
|
linux-kvm
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1002.2)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.4.0-1020.25)
|
|
| zesty |
Does not exist
|
|
|
linux-linaro-omap
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-linaro-shared
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-linaro-vexpress
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-quantal
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
| This package is not directly supported by the Ubuntu Security Team | ||
|
linux-lts-raring
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-saucy
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
| This package is not directly supported by the Ubuntu Security Team | ||
|
linux-lts-trusty
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-utopic
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [end of standard support])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-vivid
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Ignored
(end of life, was needs-triage)
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-wily
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [end of standard support])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-lts-xenial
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Released
(4.4.0-119.143~14.04.1)
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-maguro
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-mako
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Ignored
(abandoned)
|
|
| zesty |
Does not exist
|
|
|
linux-manta
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
(trusty was ignored [abandoned])
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-oem
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Not vulnerable
(4.15.0-1002.3)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.13.0-1028.31)
|
|
| zesty |
Does not exist
|
|
|
linux-qcm-msm
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
linux-raspi2
Launchpad, Ubuntu, Debian |
artful |
Released
(4.13.0-1020.21)
|
| bionic |
Not vulnerable
(4.15.0-1006.7)
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.4.0-1086.94)
|
|
| zesty |
Ignored
(end of life)
|
|
|
linux-snapdragon
Launchpad, Ubuntu, Debian |
artful |
Released
(4.4.0-1088.93)
|
| bionic |
Not vulnerable
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Released
(4.4.0-1088.93)
|
|
| zesty |
Ignored
(end of life)
|
|
|
linux-ti-omap4
Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(4.15~rc4)
|
|
| xenial |
Does not exist
|
|
| zesty |
Does not exist
|
|
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 4.7 |
| Attack vector | Local |
| Attack complexity | High |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | High |
| Integrity impact | None |
| Availability impact | None |
| Vector | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
References
- https://lkml.org/lkml/2017/12/5/950
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=93c647643b48f0131f02e45da3bd367d80443291
- https://ubuntu.com/security/notices/USN-3619-1
- https://ubuntu.com/security/notices/USN-3619-2
- https://ubuntu.com/security/notices/USN-3653-1
- https://ubuntu.com/security/notices/USN-3653-2
- https://ubuntu.com/security/notices/USN-3655-1
- https://ubuntu.com/security/notices/USN-3655-2
- https://ubuntu.com/security/notices/USN-3657-1
- https://www.cve.org/CVERecord?id=CVE-2017-17449
- NVD
- Launchpad
- Debian