vulnerability

CentOS Linux: CVE-2017-6001: Important: kernel security, bug fix, and enhancement update (Multiple Advisories)

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Feb 18, 2017
Added
Aug 28, 2019
Modified
May 25, 2023

Description

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.

Solution(s)

centos-upgrade-kernelcentos-upgrade-kernel-rt

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today