NetSight
IP …
high7.0Public exploit code

CVE-2017-10661

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-af…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.92
from 3.3 before 3.16.47
from 3.17 before 3.18.52
from 3.19 before 4.1.41
from 4.2 before 4.4.67
from 4.5 before 4.9.27
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Aus
Version 7.4
RedhatEnterprise Linux Server Eus
Version 7.5
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Version 7.4
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-416

References