NetSight
IP …
high7.0Public exploit code

CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory cor…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.14 before 3.16.47
from 3.17 before 3.18.64
from 3.19 before 4.4.80
from 4.5 before 4.9.41
from 4.10 before 4.12.5

Weakness classification

CWE-362

References