CVE-2017-7308

HIGH

AF_PACKET packet_set_ring Privilege Escalation

Title source: metasploit

Description

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.

Exploits (7)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocallinux
https://www.exploit-db.com/exploits/44654
exploitdb WORKING POC VERIFIED
by Andrey Konovalov · clocallinux
https://www.exploit-db.com/exploits/41994
exploitdb WORKING POC
by bcoles · clocallinux
https://www.exploit-db.com/exploits/47168
github WORKING POC 8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/kernel/EXP-CVE-2017-7308
nomisec WORKING POC
by anldori · poc
https://github.com/anldori/CVE-2017-7308
metasploit WORKING POC GOOD
by Andrey Konovalov, bcoles · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb

Scores

CVSS v3 7.8
EPSS 0.8700
EPSS Percentile 99.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-681 CWE-787
Status published
Products (1)
linux/linux_kernel 2.6.27 - 3.2.89
Published Mar 29, 2017
Tracked Since Feb 18, 2026