PT-2017-2268 · Linux+5 · Linux Kernel+5
Andrey Konovalov
·
Published
2017-03-28
·
Updated
2026-05-22
·
CVE-2017-7308
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.10.6
Description
The issue is caused by a signedness error in the
packet set ring function in the Linux kernel, which allows local users to cause a denial of service or gain privileges if the CAP NET RAW capability is held. This is due to improper validation of certain block-size data, leading to an out-of-bounds write. The vulnerability can be exploited via crafted system calls.Recommendations
For Linux kernel versions prior to 4.10.6, update to a version 4.10.6 or later to resolve the issue.
As a temporary workaround, consider disabling the
packet set ring function until a patch is available.
Restrict access to the CAP NET RAW capability to minimize the risk of exploitation.Exploit
Fix
DoS
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu