CVE-2017-6346

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Race condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKET_FANOUT setsockopt system calls.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362 CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164bPatch, Vendor Advisory
http://www.debian.org/security/2017/dsa-3804Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13Patch, Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/02/28/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96508Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164bPatch, Vendor Advisory
https://source.android.com/security/bulletin/2017-09-01Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d199fab63c11998a602205f7ee7ff7c05c97164bPatch, Vendor Advisory
http://www.debian.org/security/2017/dsa-3804Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.13Patch, Release Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2017/02/28/6Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/96508Third Party Advisory, VDB Entry
https://github.com/torvalds/linux/commit/d199fab63c11998a602205f7ee7ff7c05c97164bPatch, Vendor Advisory
https://source.android.com/security/bulletin/2017-09-01Third Party Advisory

Timeline

Published: Mar 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-63477.8The ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data lay CVE-2017-63485.5The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local use CVE-2017-63499.8An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate valu CVE-2017-63509.8An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate CVE-2017-63518.1The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is CVE-2017-63535.5net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, CVE-2017-63555.5Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause CVE-2017-63565.3Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which al CVE-2017-63599.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vector CVE-2017-63609.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vect CVE-2017-63619.8QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.CVE-2017-63627.5Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vect