CVE-2017-17450: High severity Linux Linux kernel vulnerability
Last updated 4 July 2026
Other sources
net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows local users to bypass intended access restrictions because the xtosffingers data structure is shared across all net namespaces.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-17450.
What is the description of the vulnerability?
The vulnerability allows local users to bypass access restrictions in the Linux kernel.
What is the affected software?
The affected software includes various versions of the Linux kernel.
How severe is CVE-2017-17450?
The severity of CVE-2017-17450 is moderate.
How do I mitigate the vulnerability?
To mitigate the vulnerability, update the Linux kernel to version 4.15 or higher.