{"id":"CVE-2017-7979","aliases":["EUVD-2017-16949","GHSA-94wh-pgqj-7f7r","UBUNTU-CVE-2017-7979"],"status":"published","title":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux...","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00395,"percentile":0.33926,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2017-04-19T00:00:00Z","modified":"2026-06-17T01:25:35Z","products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://marc.info/?l=linux-netdev\u0026m=149251041420195","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1682368","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","report"]},{"url":"https://bugzilla.proxmox.com/show_bug.cgi?id=1351","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","report"]},{"url":"http://marc.info/?l=linux-netdev\u0026m=149200742616349","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"http://marc.info/?l=linux-netdev\u0026m=149200746116365","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"http://marc.info/?l=linux-netdev\u0026m=149251041420194","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"http://marc.info/?l=linux-netdev\u0026m=149200746116366","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","report"]},{"url":"http://www.securityfocus.com/bid/97969","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7979"},{"url":"https://github.com/advisories/GHSA-94wh-pgqj-7f7r"},{"url":"https://ubuntu.com/security/CVE-2017-7979","tags":["report"]},{"url":"http://marc.info/?l=linux-netdev\u0026m=149272038713473\u0026w=2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3314-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7979","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-7979","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","status":"published","published":"2017-04-19T23:00:00Z","modified":"2024-08-05T16:19:29.63Z","updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16949","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","status":"published","published":"2017-04-19T23:00:00Z","modified":"2024-08-05T16:19:29Z","updated_at":"2026-11-03T02:39:06.470138Z"}],"ghsa":[{"id":"GHSA-94wh-pgqj-7f7r","title":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux...","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","status":"published","published":"2022-05-17T02:48:18Z","modified":"2023-01-27T05:05:22Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:42:40.834674Z"}],"nvd":[{"id":"CVE-2017-7979","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","status":"published","published":"2017-04-19T23:59:00.153Z","modified":"2026-06-17T01:25:35Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:46.08744Z"}],"osv":[{"id":"UBUNTU-CVE-2017-7979","description":"The cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux kernel 4.11.x through 4.11-rc7 mishandles the tb nlattr array, which allows local users to cause a denial of service (uninitialized memory access and refcount underflow, and system hang or crash) or possibly have unspecified other impact via \"tc filter add\" commands in certain contexts. NOTE: this does not affect stable kernels, such as 4.10.x, from kernel.org.","status":"withdrawn","published":"2017-04-19T00:00:00Z","modified":"2026-02-04T03:53:03.016123Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"}]}}