CVE - CVE-2017-7533

CVE-ID
CVE-2017-7533	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:100123 URL:http://www.securityfocus.com/bid/100123 MISC:1039075 URL:http://www.securitytracker.com/id/1039075 MISC:DSA-3927 URL:http://www.debian.org/security/2017/dsa-3927 MISC:DSA-3945 URL:http://www.debian.org/security/2017/dsa-3945 MISC:RHSA-2017:2473 URL:https://access.redhat.com/errata/RHSA-2017:2473 MISC:RHSA-2017:2585 URL:https://access.redhat.com/errata/RHSA-2017:2585 MISC:RHSA-2017:2669 URL:https://access.redhat.com/errata/RHSA-2017:2669 MISC:RHSA-2017:2770 URL:https://access.redhat.com/errata/RHSA-2017:2770 MISC:RHSA-2017:2869 URL:https://access.redhat.com/errata/RHSA-2017:2869 MISC:[oss-security] 20190627 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/06/27/7 MISC:[oss-security] 20190628 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/06/28/1 MISC:[oss-security] 20190628 Re: linux-distros membership application - Microsoft URL:http://www.openwall.com/lists/oss-security/2019/06/28/2 MISC:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e URL:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e MISC:http://openwall.com/lists/oss-security/2017/08/03/2 URL:http://openwall.com/lists/oss-security/2017/08/03/2 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1468283 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1468283 MISC:https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e URL:https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e MISC:https://patchwork.kernel.org/patch/9755753/ URL:https://patchwork.kernel.org/patch/9755753/ MISC:https://patchwork.kernel.org/patch/9755757/ URL:https://patchwork.kernel.org/patch/9755757/ MISC:https://source.android.com/security/bulletin/2017-12-01 URL:https://source.android.com/security/bulletin/2017-12-01 MISC:https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html URL:https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html
Assigning CNA
Red Hat, Inc.
Date Record Created
20170405	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20170405)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.