CVE-2017-6074

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-02-18 · updated 2026-06-17
Weakness: CWE-415

Description

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.

Affected products

Debian Linux: 8.0
Linux kernel: before 3.2.86; from 3.3 before 3.10.106; from 3.11 before 3.12.71; from 3.13 before 3.16.41; from 3.17 before 3.18.49; from 3.19 before 4.1.41 — fixed in 3.10.106, 3.12.71, 3.16.41, 3.18.49, 3.2.86, 4.1.41

How to fix

Upgrade to a fixed version: Linux kernel 3.10.106, 3.12.71, 3.16.41, 3.18.49. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-6074 or the next vulnerability affects your stack