CVE-2017-7308
HIGHAF_PACKET packet_set_ring Privilege Escalation
Title source: metasploitDescription
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service (integer signedness error and out-of-bounds write), or gain privileges (if the CAP_NET_RAW capability is held), via crafted system calls.
Exploits (7)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocallinux
https://www.exploit-db.com/exploits/44654
exploitdb
WORKING POC
VERIFIED
by Andrey Konovalov · clocallinux
https://www.exploit-db.com/exploits/41994
github
WORKING POC
8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/kernel/EXP-CVE-2017-7308
gitlab
by os-exploit · poc
https://gitlab.com/penetration-test-learn/10vuln/os-exploit/bcoles-kernel-exploits
metasploit
WORKING POC
GOOD
by Andrey Konovalov, bcoles · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb
References (12)
Scores
CVSS v3
7.8
EPSS
0.8700
EPSS Percentile
99.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-681
CWE-787
Status
published
Products (1)
linux/linux_kernel
2.6.27 - 3.2.89
Published
Mar 29, 2017
Tracked Since
Feb 18, 2026