CVE-2017-18509: canonical ubuntu_linux Improper Input Validation
Vulnerability summary
CVE-2017-18509 is a high (CVSS 7.8) Improper Input Validation vulnerability in canonical ubuntu_linux. EPSS estimates a 0.84% chance of exploitation in the next 30 days, higher than 57.8% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 5Timeline
- 13-08-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control a pointer in kernel land and cause an inet_csk_listen_stop general protection fault, or potentially execute arbitrary code under certain circumstances. The issue can be triggered as root (e.g., inside a default LXC container or with the CAP_NET_ADMIN capability) or after namespace unsharing. This occurs because sk_type and protocol are not checked in the appropriate part of the ip6_mroute_* functions. NOTE: this affects Linux distributions that use 4.9.x longterm kernels before 4.9.187.
CVSS metrics
5 scores · 3 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.84%
Chance of exploitation in the next 30 days
Percentile
58%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.84% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (pulsesecurity.co.nz)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu15 products
- linuxAll versions (No fix recorded) | < 4.4.0-165.193
- linux-aws< 4.4.0-1055.59 | < 4.4.0-1095.106
- linux-azure-fdeAll versions (No fix recorded)
- linux-fips< 4.4.0-1022.27 | All versions (No fix recorded)
- linux-gcp< 4.13.0-1002.5
Debian2 products
- linux< 4.11.6-1
- debian_linuxEOL8.0 | 9.0 | 10.0
Canonical1 product
- ubuntu_linuxEOL16.04
Linux1 product
- linux_kernel< 3.16.72 | ≥ 3.17, < 4.4.187 | ≥ 4.5, < 4.9.187 | ≥ 4.10, < 4.11
4 vendors · 19 products
References
18 links- pulsesecurity.co.nz/advisories/linux-kernel-4.9-inetcsklistenstop-gpfX Refsource MISCExploitThird Party AdvisoryREPORT
salsa.debian.org/kernel-team/linux/commit/baefcdc2f29923e7325ce4e1a72c3ff0a9800f32X Refsource MISCThird Party AdvisoryREPORT- github.com/torvalds/linux/commit/99253eb750fda6a644d5188fb26c43bad8d5a745X Refsource MISCPatchThird Party AdvisoryREPORT
- lists.debian.org/debian-lts-announce/2019/08/msg00016.htmlMailing ListX Refsource MLISTThird Party AdvisoryREPORT
- lists.debian.org/debian-lts-announce/2019/08/msg00017.htmlMailing ListX Refsource MLISTThird Party Advisory
- packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlX Refsource MISCThird Party AdvisoryVDB Entry