NetSight
high7.8

CVE-2017-17863

kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local use…

Impact

kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer overflow or invalid memory access) or possibly have unspecified other impact.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9.0 through 4.9.71
DebianDebian Linux
Version 9.0

Weakness classification

References