CVE-2017-7533

Published: Aug 5, 2017Modified: May 13, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Affected (5)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.14 to 3.16.47
Linux Linux Kernel	From 3.17 to 3.18.64
Linux Linux Kernel	From 3.19 to 4.4.80
Linux Linux Kernel	From 4.10 to 4.12.5
Linux Linux Kernel	From 4.5 to 4.9.41

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (40)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://openwall.com/lists/oss-security/2017/08/03/2

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.debian.org/security/2017/dsa-3927

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2017/dsa-3945

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/27/7

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/1

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/100123

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1039075

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:2473

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2585

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2669

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2770

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2869

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1468283

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://patchwork.kernel.org/patch/9755753/

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://patchwork.kernel.org/patch/9755757/

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://source.android.com/security/bulletin/2017-12-01

Source: secalert@redhat.com

Third Party Advisory

https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e