$ cve CVE-2017-7308 JSON

CVE-2017-7308 EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 17.8% (pctl 97)

Patch early

A public exploit exists.

Description

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	17.83% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-681
On CISA KEV	no
Public exploit	yes
Published	2017-03-29
Last modified	2026-06-17

Affected (1)

Vendor	Product
linux	linux kernel

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation	2018-12-29
exploit-db	Linux 4.8.0 < 4.8.0-46 - AF_PACKET packet_set_ring Privilege Escalation (Metasploit)	2018-05-18
exploit-db	Linux Kernel 4.8.0-41-generic (Ubuntu) - Packet Socket Local Privilege Escalation	2017-05-11

References

→ the Explorer · watch your stack · NVD