Every CVE Search/ Get API key

CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type...

7.5 HighFix available

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

9.48%Up 5.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
CVE-2017-8797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-129
Updated
2026-11-02
CVE List No score

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
CVE-2017-8797
Updated
2026-11-02
EUVDEUVD-2017-17740 No score

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
EUVD-2017-17740
Updated
2026-11-03
GitHub AdvisoriesGHSA-c5mc-v7p9-x5g6 7.5

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type...

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
GHSA-c5mc-v7p9-x5g6
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-129
Updated
2026-11-02
OSV 7.5

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
CVE-2017-8797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-8797 7.5

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
DEBIAN-CVE-2017-8797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVRHSA-2017:1842 8.6

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2017:1842
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2077 8.6

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2017:2077
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2437 8.6

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2017:2437
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2017:2669 8.6

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2017:2669
CVSS 3.0
8.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-8797 7.5

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Record
UBUNTU-CVE-2017-8797
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2017:2043-1 No score

Security update for Linux Kernel Live Patch 3 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-90 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2043-1
Updated
2026-11-02
OSVSUSE-SU-2017:2046-1 No score

Security update for Linux Kernel Live Patch 8 for SLE 12 SP2

This update for the Linux Kernel 4.4.59-92_20 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).

The following non-security bug was fixed:

  • Fix for a btrfs deadlock between btrfs-cleaner and user space thread regression, which could cause spurious WARN_ON's from fs/btrfs/qgroup.c:1445 during patch application if BTRFS quota groups are enabled. (bsc#1047518)
Record
SUSE-SU-2017:2046-1
Updated
2026-11-02
OSVSUSE-SU-2017:2062-1 No score

Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-69 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2062-1
Updated
2026-11-02
OSVSUSE-SU-2017:2063-1 No score

Security update for Linux Kernel Live Patch 5 for SLE 12 SP2

This update for the Linux Kernel 4.4.49-92_11 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2063-1
Updated
2026-11-02
OSVSUSE-SU-2017:2064-1 No score

Security update for Linux Kernel Live Patch 7 for SLE 12 SP2

This update for the Linux Kernel 4.4.59-92_17 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).

The following non-security bug was fixed:

  • Fix for a btrfs deadlock between btrfs-cleaner and user space thread regression, which could cause spurious WARN_ON's from fs/btrfs/qgroup.c:1445 during patch application if BTRFS quota groups are enabled. (bsc#1047518)
Record
SUSE-SU-2017:2064-1
Updated
2026-11-02
OSVSUSE-SU-2017:2065-1 No score

Security update for Linux Kernel Live Patch 4 for SLE 12 SP2

This update for the Linux Kernel 4.4.38-93 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2065-1
Updated
2026-11-02
OSVSUSE-SU-2017:2066-1 No score

Security update for Linux Kernel Live Patch 9 for SLE 12 SP2

This update for the Linux Kernel 4.4.59-92_24 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).

The following non-security bug was fixed:

  • Fix for a btrfs deadlock between btrfs-cleaner and user space thread regression, which could cause spurious WARN_ON's from fs/btrfs/qgroup.c:1445 during patch application if BTRFS quota groups are enabled. (bsc#1047518)
Record
SUSE-SU-2017:2066-1
Updated
2026-11-02
OSVSUSE-SU-2017:2067-1 No score

Security update for Linux Kernel Live Patch 1 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-81 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2067-1
Updated
2026-11-02
OSVSUSE-SU-2017:2068-1 No score

Security update for Linux Kernel Live Patch 2 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-84 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-2636: Race condition in drivers/tty/n_hdlc.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (bsc#1027575).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2068-1
Updated
2026-11-02
OSVSUSE-SU-2017:2070-1 No score

Security update for Linux Kernel Live Patch 6 for SLE 12 SP2

This update for the Linux Kernel 4.4.49-92_14 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
  • CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system (bsc#1046202)
  • CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
  • CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
  • CVE-2017-9077: The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel mishandled inheritance, which allowed local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890 (bsc#1042364).
  • CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
Record
SUSE-SU-2017:2070-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.9.30-1
4.9.30-1
linux
Debian:13
 before 4.9.30-1
4.9.30-1
linux
Debian:14
 before 4.9.30-1
4.9.30-1
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
Show 168 moreShow less
Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::client
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::computenode
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-bootwrapper
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-kdump-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::server
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-abi-whitelists
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-debug-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-doc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-tools-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
python-perf
Red Hat:enterprise_linux:7::workstation
From an advisory covering 38 CVEs
 before 0:3.10.0-693.el7
0:3.10.0-693.el7
kernel-rt
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debug-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-debuginfo-common-x86_64
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-doc
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-devel
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-kvm
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel-rt-trace-kvm-debuginfo
Red Hat:rhel_extras_rt:7
From an advisory covering 36 CVEs
 before 0:3.10.0-693.rt56.617.el7
0:3.10.0-693.rt56.617.el7
kernel
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-abi-whitelists
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug-debuginfo
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug-devel
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-devel
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-doc
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-headers
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-debuginfo
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-libs
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
perf
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
perf-debuginfo
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
python-perf
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
python-perf-debuginfo
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-libs-devel
Red Hat:rhel_eus:7.3::computenode
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-abi-whitelists
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-bootwrapper
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debug-devel
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo-common-ppc64
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-devel
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-doc
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-headers
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-kdump
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-kdump-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-kdump-devel
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-libs
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
perf
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
perf-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
python-perf
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
python-perf-debuginfo
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-tools-libs-devel
Red Hat:rhel_eus:7.3::server
From an advisory covering 4 CVEs
 before 0:3.10.0-514.28.1.el7
0:3.10.0-514.28.1.el7
kernel-rt
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-debug
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-debug-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-debug-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-doc
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-firmware
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-trace
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-trace-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-trace-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-vanilla
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-vanilla-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kernel-rt-vanilla-devel
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 25 CVEs
 before 1:3.10.0-693.2.1.rt56.585.el6rt
1:3.10.0-693.2.1.rt56.585.el6rt
kgraft-patch-SLE12-SP2_Update_3
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 7-2.1
7-2.1
kgraft-patch-SLE12-SP2_Update_8
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 6 CVEs
 before 3-2.1
3-2.1
kgraft-patch-SLE12-SP2_Update_0
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 8-18.7.1
8-18.7.1
kgraft-patch-SLE12-SP2_Update_5
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 5-2.1
5-2.1
kgraft-patch-SLE12-SP2_Update_7
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 6 CVEs
 before 3-2.1
3-2.1
kgraft-patch-SLE12-SP2_Update_4
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 7-2.1
7-2.1
kgraft-patch-SLE12-SP2_Update_9
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 6 CVEs
 before 2-2.1
2-2.1
kgraft-patch-SLE12-SP2_Update_1
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 8-2.1
8-2.1
kgraft-patch-SLE12-SP2_Update_2
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 7 CVEs
 before 7-2.1
7-2.1
kgraft-patch-SLE12-SP2_Update_6
SUSE:Linux Enterprise Live Patching 12
From an advisory covering 6 CVEs
 before 4-2.1
4-2.1
linux-lts-xenial
Ubuntu:14.04:LTS
 before 4.4.0-83.106~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 27 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.1
4.4.0-83.106~14.04.1
linux
Ubuntu:16.04:LTS
 before 4.4.0-83.106, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-83.106
linux-aws
Ubuntu:16.04:LTS
 before 4.4.0-1022.31, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 7 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.29
4.4.0-1022.31
linux-gcp
Ubuntu:16.04:LTS
 before 4.13.0-1002.5, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
4.13.0-1002.5
linux-hwe
Ubuntu:16.04:LTS
 before 4.13.0-32.35~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 21 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.1
4.13.0-32.35~16.04.1
linux-raspi2
Ubuntu:16.04:LTS
 before 4.4.0-1061.69, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 25 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.67
4.4.0-1061.69
linux-snapdragon
Ubuntu:16.04:LTS
 before 4.4.0-1063.68, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 22 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.66
4.4.0-1063.68
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-8797 is a high vulnerability (CVSS 7.5) in Linux Kernel, published July 2, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.48%, the 95th percentile. Fixed in linux 4.9.30-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 5 versions and 77 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open