CVE-2017-7558

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-26 · updated 2026-06-17
Weakness: CWE-125

Description

A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sctp_get_sctp_info() functions present since version 4.7-rc1 through version 4.13. A data leak happens when these functions fill in sockaddr data structures used to export socket's diagnostic information. As a result, up to 100 bytes of the slab data could be leaked to a userspace.

Affected products

Debian Linux: 8.0, 9.0
Linux kernel: from 4.7 through 4.13; 4.7-rc1, 4.7-rc2, 4.7-rc3, 4.7-rc4, 4.7-rc5, 4.7-rc6 (+1)

References

http://seclists.org/oss-sec/2017/q3/338
http://www.securityfocus.com/bid/100466
http://www.securitytracker.com/id/1039221
https://access.redhat.com/errata/RHSA-2017:2918
https://access.redhat.com/errata/RHSA-2017:2930
https://access.redhat.com/errata/RHSA-2017:2931
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7558
https://marc.info/?l=linux-netdev&m=150348777122761&w=2
https://www.debian.org/security/2017/dsa-3981
http://seclists.org/oss-sec/2017/q3/338
http://www.securityfocus.com/bid/100466
http://www.securitytracker.com/id/1039221

Get alerted when CVE-2017-7558 or the next vulnerability affects your stack