A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

CPENameOperatorVersion
debian_linuxeq9.0
debian_linuxeq10.0
debian_linuxeq11.0
fedoraeq34
fedoraeq35
linux_kernellt5.17
linux_kerneleq5.17 rc5
linux_kerneleq5.17 rc4
linux_kerneleq5.17 rc1
linux_kerneleq5.17 rc2

Name	Operator	Version
debian_linux	eq	9.0
debian_linux	eq	10.0
debian_linux	eq	11.0
fedora	eq	34
fedora	eq	35
linux_kernel	lt	5.17
linux_kernel	eq	5.17 rc5
linux_kernel	eq	5.17 rc4
linux_kernel	eq	5.17 rc1
linux_kernel	eq	5.17 rc2