The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows attackers to bypass this limitation. This affects Linux Kernel versions 4.11.5 and earlier. It appears that this feature was introduced in the Linux Kernel version 2.6.23.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 7, 2017 | Jun 19, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools | Nov 30, 2017 | Jun 19, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 24, 2017 | Jun 19, 2017 |
| Redhat_linux | — | No solution exists | Jul 16, 2026 | Jun 19, 2017 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-default | Jul 10, 2017 | Jun 19, 2017 |
| Ubuntu | — | Upgrade linux-image-4.10.0-30-generic-lpaeUpgrade linux-image-4.4.0-89-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.4.0-89-genericUpgrade linux-image-4.10.0-1013-raspi2Upgrade linux-image-4.4.0-1028-awsUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-126-powerpc64-embUpgrade linux-image-3.13.0-126-generic-lpaeUpgrade linux-image-4.4.0-1067-raspi2Upgrade linux-image-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-126-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.10.0-30-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-126-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-30-genericUpgrade linux-image-3.13.0-126-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-126-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-89-generic-lpaeUpgrade linux-image-4.4.0-1024-gkeUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-89-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-126-powerpc-smpUpgrade linux-image-3.13.0-126-genericUpgrade linux-image-4.4.0-89-lowlatencyUpgrade linux-image-4.4.0-89-powerpc-smpUpgrade linux-image-4.4.0-89-powerpc-e500mcUpgrade linux-image-4.4.0-1069-snapdragonUpgrade linux-image-powerpc-smp | Aug 4, 2017 | Jun 19, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub