vulnerability

Red Hat: CVE-2017-6001: Important: kernel security, bug fix, and enhancement update (Multiple Advisories)

Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
Feb 18, 2017
Added
Aug 3, 2017
Modified
Mar 3, 2021

Description

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.