What’s Vulnerable › Vulnerabilities

CVE-2017-8797

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-02 · updated 2026-06-17
• Weakness: CWE-129

Description

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used as an array index for dereferencing, which leads to an OOPS and eventually a DoS of knfsd and a soft-lockup of the whole system.

Affected products

• Linux kernel: from 4.0 before 4.1.40; from 4.2 before 4.4.70; from 4.5 before 4.9.30; from 4.11 before 4.11.3 — fixed in 4.1.40, 4.11.3, 4.4.70, 4.9.30

How to fix

Upgrade to a fixed version: Linux kernel 4.1.40, 4.11.3, 4.4.70, 4.9.30. Check the vendor advisory for mitigations.

References

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b550a32e60a4941994b437a8d662432a486235a5
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f961e3f2acae94b727380c0b74e2d3954d0edf79
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.3
• http://www.openwall.com/lists/oss-security/2017/06/27/5
• http://www.securityfocus.com/bid/99298
• http://www.securitytracker.com/id/1038790
• https://access.redhat.com/errata/RHSA-2017:1842
• https://access.redhat.com/errata/RHSA-2017:2077
• https://access.redhat.com/errata/RHSA-2017:2437
• https://access.redhat.com/errata/RHSA-2017:2669
• https://bugzilla.redhat.com/show_bug.cgi?id=1466329
• https://github.com/torvalds/linux/commit/b550a32e60a4941994b437a8d662432a486235a5

Get alerted when CVE-2017-8797 or the next vulnerability affects your stack