The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-linux-grsec | Nov 8, 2019 | Mar 29, 2017 |
| Amazon_linux | — | amazon-linux-upgrade-kernel | May 11, 2017 | Mar 29, 2017 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | May 27, 2017 | Mar 29, 2017 |
| Debian | debian-upgrade-linux | May 1, 2017 | Mar 29, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | May 26, 2017 | Mar 29, 2017 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | May 27, 2017 | Mar 29, 2017 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Apr 19, 2017 | Mar 29, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-116-genericubuntu-upgrade-linux-image-3-13-0-116-generic-lpaeubuntu-upgrade-linux-image-3-13-0-116-lowlatencyubuntu-upgrade-linux-image-3-13-0-116-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-116-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-116-powerpc-smpubuntu-upgrade-linux-image-3-13-0-116-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-126-genericubuntu-upgrade-linux-image-3-2-0-126-generic-paeubuntu-upgrade-linux-image-3-2-0-126-highbankubuntu-upgrade-linux-image-3-2-0-126-omapubuntu-upgrade-linux-image-3-2-0-126-powerpc-smpubuntu-upgrade-linux-image-3-2-0-126-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-126-virtualubuntu-upgrade-linux-image-3-2-0-1504-omap4ubuntu-upgrade-linux-image-4-4-0-1010-gkeubuntu-upgrade-linux-image-4-4-0-1013-awsubuntu-upgrade-linux-image-4-4-0-1052-raspi2ubuntu-upgrade-linux-image-4-4-0-1055-snapdragonubuntu-upgrade-linux-image-4-4-0-72-genericubuntu-upgrade-linux-image-4-4-0-72-generic-lpaeubuntu-upgrade-linux-image-4-4-0-72-lowlatencyubuntu-upgrade-linux-image-4-4-0-72-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-72-powerpc-smpubuntu-upgrade-linux-image-4-4-0-72-powerpc64-smpubuntu-upgrade-linux-image-4-8-0-1033-raspi2ubuntu-upgrade-linux-image-4-8-0-46-genericubuntu-upgrade-linux-image-4-8-0-46-generic-lpaeubuntu-upgrade-linux-image-4-8-0-46-lowlatencyubuntu-upgrade-linux-image-4-8-0-46-powerpc-e500mcubuntu-upgrade-linux-image-4-8-0-46-powerpc-smpubuntu-upgrade-linux-image-4-8-0-46-powerpc64-embubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-generic-paeubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-highbankubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-omapubuntu-upgrade-linux-image-omap4ubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-utopicubuntu-upgrade-linux-image-powerpc64-smp-lts-vividubuntu-upgrade-linux-image-powerpc64-smp-lts-wilyubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtual | Apr 5, 2017 | Mar 29, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub