CVE-2017-14497: The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers,...

Security readout for executives and security teams

CVE-2017-14497 is a Linux kernel flaw in packet socket receive handling. A local user may be able to crash or corrupt a system by abusing crafted system calls. Public sources describe denial of service, buffer overflow, disk and memory corruption, and possible unspecified impact, but do not provide a CVSS score. Exposure is most relevant to Linux systems running kernels before 4.13 or vendor kernels missing the cited backport. Risk is higher on shared systems where untrusted local users can execute code. The bundle does not identify specific distributions beyond referenced vendor advisories. Address during normal vulnerability remediation, with faster handling for multi-user or shared-host environments. Current sources support local denial-of-service and corruption risk, not confirmed remote exploitation or known active exploitation. Mitigation focus: Upgrade to a vendor kernel containing the upstream fix or equivalent backport.; Review Debian, Red Hat, Android, and relevant vendor advisories for package-specific guidance.; Prioritize shared Linux hosts where untrusted local users can run code..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.