CVE-2017-11600: net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not en...

Security readout for executives and security teams

This Linux kernel flaw can let a local user crash or destabilize an affected system. It matters most on shared servers, appliances, or endpoints where untrusted users or workloads can run code locally. The source bundle does not show active exploitation or confirmed remote attack paths. Exposure is limited to Linux systems using affected kernel code through 4.12.3 with CONFIG_XFRM_MIGRATE enabled. Systems require local user or local workload access to reach the vulnerable path. Vendor backports mean version-only checks may be misleading. Treat this as a patch-management issue with moderate urgency. It is not shown as actively exploited, but kernel denial-of-service risk is material on shared or exposed workload platforms. Mitigation focus: Review applicable vendor advisories for your distribution or device family.; Apply vendor-supplied kernel security updates where available.; Prioritize shared, multi-user, and workload-hosting Linux systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.