View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-8824 severity important: SUSE including 248 source package names (cluster-md-kmp-default-4.12.14-120.1, cluster-md-kmp-default-4.4.103-6.33.1, …), 535 product×package rows across 81 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (81 product lines)): Fixed 359, Known Not Affected 176.
The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.