imPC@ndo IT

Tracker / CVE-2017-7533

CVE-2017-7533

High 7.0

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Affected products and versions

linux linux_kernel · 3.14 → 3.16.47
linux linux_kernel · 3.17 → 3.18.64
linux linux_kernel · 3.19 → 4.4.80
linux linux_kernel · 4.10 → 4.12.5
linux linux_kernel · 4.5 → 4.9.41

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References