CVE-2017-15115: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 17.10 only
• Debian Debian Linux: version 7.0 only
• Linux Linux Kernel: before 3.2.96 (fixed in 3.2.96); from 3.3, before 3.16.51 (fixed in 3.16.51); from 3.17, before 3.18.84 (fixed in 3.18.84); from 3.19, before 4.1.47 (fixed in 4.1.47); from 4.2, before 4.4.100 (fixed in 4.4.100); from 4.5, before 4.9.65 (fixed in 4.9.65); …
• Suse Linux Enterprise Server: version 11 only

Published 2017-11-15. Last modified 2026-06-17.