The inetcskclonelock function in net/ipv4/inetconnection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-8890.json"
[
{
"target": {
"file": "net/ipv4/inet_connection_sock.c"
},
"digest": {
"line_hashes": [
"306206022598827562953179300417244527348",
"235163219867180195467411000002744226495",
"200086925909670915518285662675529602721"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2017-8890-6c652d9c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@657831ffc38e30092a2d5f03d385d710eb88b09a",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "net/ipv4/inet_connection_sock.c",
"function": "inet_csk_clone_lock"
},
"digest": {
"length": 873.0,
"function_hash": "330768940525994071140165305459278269047"
},
"signature_type": "Function",
"id": "CVE-2017-8890-7147f8a9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@657831ffc38e30092a2d5f03d385d710eb88b09a",
"deprecated": false,
"signature_version": "v1"
}
]