CVE-2017-10661

CVSS v3.1 7 (High)

CVSS v2.0 7.6 (High)

EPSS 0.08 % (37^th)

Affected Products 6

Advisories 43

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.

Weaknesses

CWE-416: Use After Free

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2017-08-19 18:29:00
(7 years ago)
Updated Date: 2024-03-14 19:59:04
(6 months ago)

Affected Products

Debian

Debian Linux

Linux

Linux Kernel

Redhat

Configuration #1

	CPE23	From	Up To
Linux Kernel prior 3.2.92 version	cpe:2.3:o:linux:linux_kernel		< 3.2.92
Linux Kernel from 3.3 version and prior 3.16.47 version	cpe:2.3:o:linux:linux_kernel	>= 3.3	< 3.16.47
Linux Kernel from 3.17 version and prior 3.18.52 version	cpe:2.3:o:linux:linux_kernel	>= 3.17	< 3.18.52
Linux Kernel from 3.19 version and prior 4.1.41 version	cpe:2.3:o:linux:linux_kernel	>= 3.19	< 4.1.41
Linux Kernel from 4.2 version and prior 4.4.67 version	cpe:2.3:o:linux:linux_kernel	>= 4.2	< 4.4.67
Linux Kernel from 4.5 version and prior 4.9.27 version	cpe:2.3:o:linux:linux_kernel	>= 4.5	< 4.9.27
Linux Kernel from 4.10 version and prior 4.10.15 version	cpe:2.3:o:linux:linux_kernel	>= 4.10	< 4.10.15

Configuration #2

		CPE23	From	Up To
	Redhat Enterprise Linux 7.0	cpe:2.3:o:redhat:enterprise_linux:7.0
	Redhat Enterprise Linux Aus 7.4	cpe:2.3:o:redhat:enterprise_linux_aus:7.4
	Redhat Enterprise Linux Server Eus 7.5	cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
	Redhat Enterprise Linux Server for Power Little Endian Update Services For Sap Solutions 7.4	cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4

Configuration #3

		CPE23	From	Up To
	Debian Linux 8.0	cpe:2.3:o:debian:debian_linux:8.0
	Debian Linux 9.0	cpe:2.3:o:debian:debian_linux:9.0