CVE-2017-7308 2

Vulnerability (CVE)

CVE-2020-14386: Privilege Escalation Vulnerability in the Linux kernel

Palo Alto Networks researchers found CVE-2020-14386, a memory corruption bug in the Linux kernel's tpacket_rcv function that lets an unprivileged user escalate to root. The arithmetic flaw was introduced in a July 19, 2008 commit and became triggerable for...

Vulnerabilities & Patching

Exploiting the Linux kernel via packet sockets

Cyber Risks Google Project Zero

Project Zero's Andrey Konovalov found CVE-2017-7308, a signedness bug in the Linux kernel's packet_set_ring() function that lets a crafted PACKET_RX_RING option on an AF_PACKET socket with a TPACKET_V3 ring buffer bypass a sanity check and cause an...

Vulnerabilities & Patching