Description
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAX_SKB_FRAGS+1 size in conjunction with the NETIF_F_FRAGLIST feature, leading to an error in the skb_to_sgvec function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Linux kernel | Linux kernel | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.9.25-1 | — |
| Debian 13 | linux | 4.9.25-1 | — |
| Debian 12 | linux | 4.9.25-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +3 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +2 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe | 4.8.0-56.61~16.04.1 | USN-3292-2 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | kernel-rt +10 | 3.10.0-514.26.1.rt56.442.el7 | RHSA-2017:1616 |
| RHEL 7 | perf +18 | 3.10.0-514.26.1.el7 | RHSA-2017:1615 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.8.el6uek | 0.6.0-4.el6 | ELSA-2017-3589 |
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.8.el7uek | 0.6.0-4.el7 | ELSA-2017-3589 |
| Oracle Linux 7 | kernel-uek +5 | 4.1.12-94.3.8.el7uek | ELSA-2017-3589 |
| Oracle Linux 7 | perf +11 | 3.10.0-514.26.1.el7 | ELSA-2017-1615 |
Advisories 5
- RHSA-2017:1616 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:1615 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-3292-2 linux-hwe vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- ELSA-2017-3589 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 30, 2017
- ELSA-2017-1615 Important: kernel security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 28, 2017
References
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4d6fa57b4dab0d77f4d8e9d9c73d1e63f6fe8fee
- 1038500 vdb-entry
- RHSA-2017:1615 vendor-advisory
- RHSA-2017:1616 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1445207
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5294b83086cc1c35b4efeca03644cf9d12282e5b
- 98014 vdb-entry