CVE-2017-2671
MEDIUMLinux Kernel < 4.10.8 - Denial of Service
Title source: ruleDescription
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect function calls are safe, which allows local users to cause a denial of service (panic) by leveraging access to the protocol value of IPPROTO_ICMP in a socket system call.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Daniel Jiang · cdosandroid
https://www.exploit-db.com/exploits/42135
References (12)
Scores
CVSS v3
5.5
EPSS
0.0027
EPSS Percentile
49.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
Status
published
Affected Products (2)
linux/linux_kernel
< 4.10.8
n/a/n/a
Timeline
Published
Apr 05, 2017
Tracked Since
Feb 18, 2026