CVE-2017-14106: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a...

Security readout for executives and security teams

CVE-2017-14106 is a Linux kernel flaw that can let a local user crash the system. It is a denial-of-service issue, not described in the sources as remote code execution, privilege escalation, or data theft. Business urgency is highest for shared systems where untrusted local users can run code. Potentially exposed assets are Linux systems running kernels before 4.12 or vendor kernels without the relevant backport. The bundle’s affected-product metadata is incomplete, so exposure should be determined by kernel package and vendor advisory status, not by the placeholder affected list. Treat as a moderate availability risk. It is most urgent for multi-user Linux environments because a local user could crash a system. Patch through normal kernel maintenance, with faster action on shared or business-critical hosts. Mitigation focus: Upgrade to a kernel containing the upstream fix or vendor backport.; Review Red Hat, Debian, and SUSE advisories for distribution-specific fixed packages.; Prioritize shared hosts where local users can run untrusted code..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.