The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890.
[
{
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
"digest": {
"function_hash": "292636884320266921516948366578728719069",
"length": 926.0
},
"target": {
"file": "net/sctp/ipv6.c",
"function": "sctp_v6_create_accept_sk"
},
"id": "CVE-2017-9075-333e12a3",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"179462763171826886985105406037990195433",
"43245883656700471698881982645081153493",
"171396247146687018448379619126156491296",
"137725081016949959278201621977941819901"
]
},
"target": {
"file": "net/sctp/ipv6.c"
},
"id": "CVE-2017-9075-4449683d",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-9075.json"