CVE-2017-7477: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.

Affected products

• Linux Linux Kernel: from 4.6, before 4.9.28 (fixed in 4.9.28); from 4.10, before 4.10.16 (fixed in 4.10.16)

Published 2017-04-25. Last modified 2026-06-17.