CVEs-PoC/2015/CVE-2015-7799.md

CVE-2015-7799

Description

The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot numbers are valid, which allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl call.

POC

Reference

• http://www.ubuntu.com/usn/USN-2843-2
• http://www.ubuntu.com/usn/USN-2886-1

Github

• https://github.com/guoygang/vul-guoygang