Vulnetix
Try Vulnetix Request Demo
CVE-2017-7979 REJECTED

The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via "tc filter add" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.

EPSS 0.04% · 13.5th percentile

Risk Scores

EPSS Score
0.04%
13.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlinux-hwe4.8.0-58.63~16.04.1, 4.8.0-53.56~16.04.1, 4.8.0-54.57~16.04.1
Ubuntu:16.04:LTSlinux-azure0
Ubuntu:16.04:LTSlinux-gcp0
Ubuntu:14.04:LTSlinux-azure0

Timeline

References

Open in Interactive Console →