CVE:CVE-2017-15115
CNNVD:CNNVD-201711-540
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.14之前的版本net/sctp/socket.c文件的‘sctp_do_peeloff’ 函数存在安全漏洞。本地攻击者可借助特制的系统调用利用该漏洞造成拒绝服务（释放后重用和系统崩溃）。
solution:Upgrade linux linux_kernel to a higher version than 3.2.96,3.16.51,3.18.84,4.1.47,4.4.100,4.9.65,4.13.16,and avoid the version (,3.2.96),[3.3,3.16.51),[3.17,3.18.84),[3.19,4.1.47),[4.2,4.4.100),[4.5,4.9.65),[4.10,4.13.16); Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade suse linux_enterprise_server to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10