# CVE-2017-16995

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.

- Page: https://www.vulneraibility.com/cve/CVE-2017-16995
- CVSS: 7.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 30.05% (percentile 98.2)
- Public exploit code: 4 on Exploit-DB · 1 Metasploit module · 15 GitHub proofs of concept (first 2018-03-16)
- Published: 2017-12-27

## Affected

- linux:linux_kernel
- debian:debian_linux
- canonical:ubuntu_linux

## References

- [exploit] https://www.exploit-db.com/exploits/45058/
- [other] https://github.com/torvalds/linux/commit/95a762e2c8c942780948091f8f2a4f32fce1ac6f
- [advisory] https://usn.ubuntu.com/3619-2/
- [other] https://bugs.chromium.org/p/project-zero/issues/detail?id=1454
- [advisory] https://usn.ubuntu.com/3633-1/
- [other] http://www.securityfocus.com/bid/102288
- [exploit] https://www.exploit-db.com/exploits/44298/
- [exploit] https://www.exploit-db.com/exploits/45010/
- [advisory] https://www.debian.org/security/2017/dsa-4073
- [advisory] https://usn.ubuntu.com/usn/usn-3523-2/
- [other] http://openwall.com/lists/oss-security/2017/12/21/2
- [advisory] https://usn.ubuntu.com/3619-1/
- [other] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=95a762e2c8c942780948091f8f2a4f32fce1ac6f
- [other] https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=a6132276ab5dcc38b3299082efeb25b948263adb

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.