CVE-2017-18222

In the Linux kernel before 4.12, Hisilicon Network Subsystem (HNS) does not consider the ETH_SS_PRIV_FLAGS case when retrieving sset_count data, which allows local users to cause a denial of service (buffer overflow and memory corruption) or possibly have unspecified other impact, as demonstrated by incompatibility between hns_get_sset_count and ethtool_get_strings.

• CWE-119

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a93794653968308fc100f2aa87cPatch, Vendor Advisory
• http://www.securityfocus.com/bid/103349Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87cPatch, Third Party Advisory
• https://usn.ubuntu.com/3654-1/
• https://usn.ubuntu.com/3654-2/
• https://usn.ubuntu.com/3656-1/
• https://www.debian.org/security/2018/dsa-4188
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=412b65d15a7f8a93794653968308fc100f2aa87cPatch, Vendor Advisory
• http://www.securityfocus.com/bid/103349Third Party Advisory, VDB Entry
• https://github.com/torvalds/linux/commit/412b65d15a7f8a93794653968308fc100f2aa87cPatch, Third Party Advisory
• https://usn.ubuntu.com/3654-1/
• https://usn.ubuntu.com/3654-2/
• https://usn.ubuntu.com/3656-1/
• https://www.debian.org/security/2018/dsa-4188

Published

Mar 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18217An issue was discovered in InvoicePlane before 1.5.5. It was…
• CVE-2017-18218In drivers/net/ethernet/hisilicon/hns/hns_enet.c in the Linu…7.8
• CVE-2017-18219An issue was discovered in GraphicsMagick 1.3.26. An allocat…
• CVE-2017-1822Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18220The ReadOneJNGImage and ReadJNGImage functions in coders/png…
• CVE-2017-18221The __munlock_pagevec function in mm/mlock.c in the Linux ke…
• CVE-2017-18223BMC Remedy AR System before 9.1 SP3, when Remedy AR Authenti…
• CVE-2017-18224In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use o…
• CVE-2017-18225The Gentoo net-im/jabberd2 package through 2.6.1 installs ja…
• CVE-2017-18226The Gentoo net-im/jabberd2 package through 2.6.1 sets the ow…
• CVE-2017-18227TitanHQ WebTitan Gateway has incorrect certificate validatio…
• CVE-2017-18228Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via t…