CVEs-PoC/2017/CVE-2017-15126.md

### [CVE-2017-15126](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15126)
![](https://img.shields.io/static/v1?label=Product&message=Linux%20Kernel%20before%204.13.6&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20Linux%20Kernel%20before%204.13.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-119&color=brighgreen)

### Description

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events with userfaultfd_ctx_put().

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon