NetSight
IP …
high7.0

CVE-2017-17712

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer…

Impact

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.19 before 4.1.52
from 4.2 before 4.4.109
from 4.5 before 4.9.74
from 4.10 before 4.14.11

Weakness classification

CWE-362

References