CVE-2017-7187

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-20 · updated 2026-06-17
Weakness: CWE-119

Description

The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.

Affected products

Linux kernel: before 3.18.50; from 3.19 before 4.1.40; from 4.2 before 4.4.60; from 4.5 before 4.9.21; from 4.10 before 4.10.9 — fixed in 3.18.50, 4.1.40, 4.10.9, 4.4.60, 4.9.21

How to fix

Upgrade to a fixed version: Linux kernel 3.18.50, 4.1.40, 4.10.9, 4.4.60. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-7187 or the next vulnerability affects your stack