The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6347.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
"digest": {
"function_hash": "33310064371426572965342042646816981745",
"length": 338.0
},
"id": "CVE-2017-6347-896f6dc9",
"deprecated": false,
"target": {
"file": "net/ipv4/ip_sockglue.c",
"function": "ip_cmsg_recv_checksum"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
"digest": {
"line_hashes": [
"104830954245959136993710522665576746313",
"167421151091829467124210139574465815590",
"143224733673353780343481921252838149165",
"14349459885873267644200379328849488497",
"321270345230638462567017679046202128885",
"114030313786288255840473682110541628536",
"19807462033106599054037737385000145951"
],
"threshold": 0.9
},
"id": "CVE-2017-6347-cc3c278a",
"deprecated": false,
"target": {
"file": "net/ipv4/ip_sockglue.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6347.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
"digest": {
"line_hashes": [
"104830954245959136993710522665576746313",
"167421151091829467124210139574465815590",
"143224733673353780343481921252838149165",
"14349459885873267644200379328849488497",
"321270345230638462567017679046202128885",
"114030313786288255840473682110541628536",
"19807462033106599054037737385000145951"
],
"threshold": 0.9
},
"id": "CVE-2017-6347-49b82993",
"deprecated": false,
"target": {
"file": "net/ipv4/ip_sockglue.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/ca4ef4574f1ee5252e2cd365f8f5d5bafd048f32",
"digest": {
"function_hash": "33310064371426572965342042646816981745",
"length": 338.0
},
"id": "CVE-2017-6347-91cde1a6",
"deprecated": false,
"target": {
"file": "net/ipv4/ip_sockglue.c",
"function": "ip_cmsg_recv_checksum"
}
}
]