CVE-2017-17712: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days.

The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

Affected products

• Linux Linux Kernel: from 3.19, before 4.1.52 (fixed in 4.1.52); from 4.2, before 4.4.109 (fixed in 4.4.109); from 4.5, before 4.9.74 (fixed in 4.9.74); from 4.10, before 4.14.11 (fixed in 4.14.11)

Published 2017-12-16. Last modified 2026-06-17.