CVE-2017-17852 REJECTED

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops.

EPSS 0.12% · 31.3th percentile

Risk Scores

EPSS Score
0.12%
31.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-azure0
Ubuntu:16.04:LTSlinux-azure0, 4.11.0-1009.9, 4.11.0-1011.11
Ubuntu:16.04:LTSlinux-gcp0, 4.10.0-1004.4, 4.10.0-1006.6
Ubuntu:16.04:LTSlinux-hwe0, 4.8.0-36.36~16.04.1, 4.8.0-39.42~16.04.1

Timeline

References

Open in Interactive Console →