CVE-2017-6074

The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

5.96% chance of exploitation in the next 30 days, 93th percentile

Published

2017-02-18

Updated

2024-08-05

Proof-of-concept exploits (3)

• 34zY/CVE-2017-6074-DOS0★ · 2025-09-03
• BimsaraMalinda/Linux-Kernel-4.4.0-Ubuntu---DCCP-Double-Free-Privilege-Escalation-CVE-2017…1★ · 2020-05-12
• Dk0n9/linux_exploit2★ · 2018-03-16

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/41458
• https://www.exploit-db.com/exploits/41457

Exploit collections (1)

• helloexp/0day/tree/master/98-Linux%E6%8F%90%E6%9D%83/2017/CVE-2017-6074

References

• CVE Record
• NVD entry

Related

• CVE-2021-40444
• CVE-2021-44228
• CVE-2022-24112
• CVE-2022-26134
• CVE-2025-14177
• CVE-2025-52970