Unscored CVE-2017-14051 EUVD-2017-5565GHSA-8ghc-95q8-w6ph

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 a…

Published Aug 31, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: linux Package: linux Package: linux-aws Package: linux-azure Package: linux-azure-fde Package: linux-gcp Package: linux-gke Package: linux-hwe Package: linux-intel-iot-realtime Package: linux-kvm Package: linux-lts-xenial Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-snapdragon Ecosystem: Debian Ecosystem: Ubuntu

Description

An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel through 4.12.10 allows local users to cause a denial of service (memory corruption and system crash) by leveraging root access.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	4.12.13-1	—
Debian 13	linux	4.12.13-1	—
Debian 12	linux	4.12.13-1	—
Debian 7	linux	3.2.96-1	DLA-1200-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	linux-raspi-realtime	No fix yet	—
Ubuntu 22.04 LTS	linux-riscv +2	No fix yet	—
Ubuntu 20.04 LTS	linux-gke +3	No fix yet	—
Ubuntu 16.04 LTS	linux	4.4.0-98.121	USN-3469-1
Ubuntu 16.04 LTS	linux-aws	4.4.0-1039.48	USN-3469-1
Ubuntu 16.04 LTS	linux-azure	4.13.0-1005.7	—
Ubuntu 16.04 LTS	linux-gcp	4.13.0-1002.5	—
Ubuntu 16.04 LTS	linux-gke	4.4.0-1033.33	USN-3469-1
Ubuntu 16.04 LTS	linux-hwe	4.13.0-32.35~16.04.1	—
Ubuntu 16.04 LTS	linux-kvm	4.4.0-1009.14	USN-3469-1
Ubuntu 16.04 LTS	linux-raspi2	4.4.0-1076.84	USN-3469-1
Ubuntu 16.04 LTS	linux-snapdragon	4.4.0-1078.83	USN-3469-1
Ubuntu 14.04 LTS	linux	3.13.0-142.191	USN-3583-1
Ubuntu 14.04 LTS	linux-lts-xenial	4.4.0-98.121~14.04.1	USN-3469-2

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 12 SP3	kernel-docs	4.4.92-6.18.3	SUSE-SU-2017:2847-1
SLES 12 SP3	kernel-syms +3	4.4.92-6.18.1	SUSE-SU-2017:2847-1
SLES 12 SP2	kernel-docs	4.4.90-92.45.3	SUSE-SU-2017:2869-1
SLES 12 SP2	kernel-syms +3	4.4.90-92.45.1	SUSE-SU-2017:2869-1
SLES 12 SP1	kernel-xen +3	3.12.74-60.64.63.1	SUSE-SU-2017:2908-1
SLES 12 SP1	kgraft-patch-SLE12-SP1_Update_22	1-2.1	SUSE-SU-2017:2908-1
SLES 12	kernel-ec2 +4	3.12.61-52.101.1	SUSE-SU-2017:2920-1, SUSE-SU-2017:2908-1
SLES 12	kgraft-patch-SLE12_Update_28	1-8.1	SUSE-SU-2017:2920-1
SLES 11 SP4	kernel-docs	3.0.101-108.18.3	SUSE-SU-2017:3265-1
SLES 11 SP4	kernel-ec2 +8	3.0.101-108.18.1	SUSE-SU-2025:0152-1, SUSE-SU-2017:3265-1

Show 11 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 11 SP3	kernel-ec2 +7	3.0.101-0.47.106.5.1	SUSE-SU-2017:2525-1
SLES for SAP 12 SP3	kernel-syms +2	4.4.92-6.18.1	SUSE-SU-2017:2847-1
SLES for SAP 12 SP2	kernel-syms +2	4.4.90-92.45.1	SUSE-SU-2017:2869-1
SLES for SAP 12 SP1	kernel-xen +3	3.12.74-60.64.63.1	SUSE-SU-2017:2908-1
SLES for SAP 12 SP1	kgraft-patch-SLE12-SP1_Update_22	1-2.1	SUSE-SU-2017:2908-1
SLES for SAP 11 SP4	kernel-ec2 +8	3.0.101-108.18.1	SUSE-SU-2017:3265-1
SLE Real Time 12 SP2	kernel-rt +3	4.4.88-18.1	SUSE-SU-2017:2956-1
SLE Real Time 11 SP4	kernel-rt +3	3.0.101.rt130-69.8.1	SUSE-SU-2017:2694-1
SLE Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_4	1-4.3	SUSE-SU-2017:2847-1
SLE Live Patching 12	kgraft-patch-SLE12-SP2_Update_14	1-2.4	SUSE-SU-2017:2869-1
SUSE OpenStack Cloud 6	kernel-xen +3	3.12.74-60.64.63.1	SUSE-SU-2017:2908-1
SUSE OpenStack Cloud 6	kgraft-patch-SLE12-SP1_Update_22	1-2.1	SUSE-SU-2017:2908-1
SUSE Linux Enterprise Point of Sale 11 SP3	kernel-ec2 +6	3.0.101-0.47.106.5.1	SUSE-SU-2017:2525-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	kernel-source	5.14.6-1.4	openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 7	dtrace-modules-3.8.13-118.29.1.el6uek	0.4.5-3.el6	ELSA-2019-4316
Oracle Linux 7	dtrace-modules-3.8.13-118.29.1.el7uek	0.4.5-3.el7	ELSA-2019-4316
Oracle Linux 7	kernel-uek +5	3.8.13-118.29.1.el7uek	ELSA-2019-4316

Advisories 17

USN-3583-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
USN-3469-1 linux, linux-aws, linux-gke, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
DLA-1200-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
USN-3469-2 linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
SUSE-SU-2017:2956-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2525-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13704-1 kernel-devel-longterm-6.6.17-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:3265-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2908-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2920-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2869-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:10728-1 kernel-devel-5.14.6-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2694-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2025:0152-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2017:2847-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
WID-SEC-2025-0116 Linux Kernel: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jan 19, 2025
ELSA-2019-4316 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 4, 2019

References

[debian-lts-announce] 20171210 [SECURITY] [DLA 1200-1] linux security update mailing-list
USN-3583-2 vendor-advisory
https://bugzilla.kernel.org/show_bug.cgi?id=194061
100571 vdb-entry
https://patchwork.kernel.org/patch/9929625/
USN-3583-1 vendor-advisory