Race condition in NetBSD - #VU8493
Published: September 14, 2017 / Updated: September 19, 2017
Vulnerability identifier: #VU8493
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain elevated privileges or cause DoS condition on the target system.
The weakness exists due to a missing check in the trap handler and the Linux compatibility layer. A local attacker can trigger race condition, cause the userland kernel space to panic and gain elevated privileges or cause the system to crash.
The weakness exists due to a missing check in the trap handler and the Linux compatibility layer. A local attacker can trigger race condition, cause the userland kernel space to panic and gain elevated privileges or cause the system to crash.
Affected software
NetBSD
Remediation
Install update from vendor's website.