CVE-2017-17863: Integer Overflow
kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service (integer overflow or invalid memory access) or possibly have unspecified other impact.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.9.71 - Compensating control
Limit access to the BPF subsystem (e.g., restrict unprivileged users from loading/using BPF programs) to reduce the risk of local users triggering the Linux kernel BPF verifier issue on versions 4.9.x through 4.9.71.
Event History
Frequently Asked Questions
What is CVE-2017-17863?
CVE-2017-17863 is a vulnerability in the Linux kernel that allows local users to cause a denial of service or possibly have unspecified other impact.
How does CVE-2017-17863 affect the Linux kernel?
CVE-2017-17863 affects the Linux kernel versions 4.9.x through 4.9.71.
What is the impact of CVE-2017-17863?
The impact of CVE-2017-17863 is a denial of service (integer overflow or invalid memory access) or unspecified other impact.
How can I fix CVE-2017-17863?
To fix CVE-2017-17863, update your Linux kernel to version 4.19.249-2, 4.19.289-2, 5.10.178-3, 5.10.191-1, 6.1.38-1, 6.1.52-1, or 6.5.3-1.
Where can I find more information about CVE-2017-17863?
You can find more information about CVE-2017-17863 on the CVE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17863), the OSS Security mailing list (http://www.openwall.com/lists/oss-security/2017/12/24/1), and the Spinics mailing list (https://www.spinics.net/lists/stable/msg206985.html).