FlawAtlas
Search the atlas
UBUNTU-CVE-2017-15115 High

UBUNTU-CVE-2017-15115

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.

Exploit probability Not scored
Published November 15, 2017
Required by Not available
Last source change August 17, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:16.04:LTS linux-snapdragon

40 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:14.04:LTS linux

126 explicit affected versions

Ubuntu:14.04:LTS linux-aws

8 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

48 explicit affected versions

Ubuntu:16.04:LTS linux

69 explicit affected versions

Ubuntu:16.04:LTS linux-aws

29 explicit affected versions

Ubuntu:16.04:LTS linux-azure

10 explicit affected versions

Ubuntu:16.04:LTS linux-gcp

9 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

31 explicit affected versions

Ubuntu:16.04:LTS linux-kvm

9 explicit affected versions

Ubuntu:16.04:LTS linux-oem

7 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

43 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-azure-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-gcp-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-hwe-6.11

8 explicit affected versions

Ubuntu:24.04:LTS linux-lowlatency-hwe-6.11

7 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

Ubuntu:Pro:20.04:LTS linux-azure-fde-5.15

61 explicit affected versions

Ubuntu:Pro:FIPS:16.04:LTS linux-fips

1 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related USN-3581-1
related USN-3581-3
related USN-3583-2

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2017-15115

The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.

View original source

05 / REFERENCES

Further evidence