The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service (out-of-bounds read and BUG) or possibly have unspecified other impact via crafted socket and send system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 23, 2017 | May 19, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 1, 2018 | May 19, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | May 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 15, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Nov 30, 2017 | May 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perfUpgrade kernel-tools-libs | Nov 30, 2017 | May 19, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 24, 2017 | May 16, 2017 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 3, 2017 | May 19, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2 | Jun 8, 2017 | May 19, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-3.13.0-123-genericUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-3.13.0-125-genericUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-gkeUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-4.8.0-58-genericUpgrade linux-image-snapdragon | Jun 20, 2017 | May 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub