CVE-2017-18218: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linux kernel before 4.13, local users can cause a denial of service (use-after-free and BUG) or possibly have unspecified other impact by leveraging differences in skb handling between hns_nic_net_xmit_hw and hns_nic_net_xmit.

Affected products

• Linux Linux Kernel: from 4.5, before 4.9.92 (fixed in 4.9.92); from 4.10, before 4.13 (fixed in 4.13)

Published 2018-03-05. Last modified 2026-06-17.