Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Aug 18, 2017 | Aug 3, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Aug 5, 2017 |
| Debian | — | Upgrade linux | Aug 7, 2017 | Aug 3, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Aug 5, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2017 | Aug 3, 2017 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 15, 2017 | Aug 3, 2017 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade gfs2-kmp-default | Aug 3, 2017 | Aug 3, 2017 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-89-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.10.0-30-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-89-powerpc64-smpUpgrade linux-image-4.4.0-1024-gkeUpgrade linux-image-4.10.0-30-generic-lpaeUpgrade linux-image-4.10.0-1013-raspi2Upgrade linux-image-awsUpgrade linux-image-4.10.0-30-genericUpgrade linux-image-4.4.0-1028-awsUpgrade linux-image-4.4.0-1069-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-89-lowlatencyUpgrade linux-image-4.4.0-89-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-89-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-89-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-89-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1067-raspi2Upgrade linux-image-generic-lpae-hwe-16.04 | Aug 4, 2017 | Aug 3, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub