Linux distributions that have not patched their long-term kernels with…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 29
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:centos:centos:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.4:*:*:*:*:*:*:* | 6.4 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.5:*:*:*:*:*:*:* | 6.5 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.6:*:*:*:*:*:*:* | 6.6 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.7:*:*:*:*:*:*:* | 6.7 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.8:*:*:*:*:*:*:* | 6.8 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:6.9:*:*:*:*:*:*:* | 6.9 | Vulnerable | Centos |
- cpe:2.3:o:centos:centos:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.8:*:*:*:*:*:*:* Versions 6.8 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:6.9:*:*:*:*:*:*:* Versions 6.9 Vulnerable ·Centos
Show 19 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:centos:centos:7.1406:*:*:*:*:*:*:* | 7.1406 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:7.1503:*:*:*:*:*:*:* | 7.1503 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:7.1511:*:*:*:*:*:*:* | 7.1511 | Vulnerable | Centos |
| cpe:2.3:o:centos:centos:7.1611:*:*:*:*:*:*:* | 7.1611 | Vulnerable | Centos |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.4:*:*:*:*:*:*:* | 6.4 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.5:*:*:*:*:*:*:* | 6.5 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.6:*:*:*:*:*:*:* | 6.6 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:* | 6.7 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.8:*:*:*:*:*:*:* | 6.8 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.9:*:*:*:*:*:*:* | 6.9 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Red Hat |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 2.6.25 to before 3.2.70; 3.3 to before 3.4.109; 3.5 to before 3.10.77; 3.11 to before 3.12.43; 3.13 to before 3.14.41; 3.15 to before 3.16.35; 3.17 to before 3.18.14; 3.19 to before 3.19.7; 4.0 to before 4.0.2 | Vulnerable | Linux |
- cpe:2.3:o:centos:centos:7.1406:*:*:*:*:*:*:* Versions 7.1406 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:7.1503:*:*:*:*:*:*:* Versions 7.1503 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:7.1511:*:*:*:*:*:*:* Versions 7.1511 Vulnerable ·Centos
- cpe:2.3:o:centos:centos:7.1611:*:*:*:*:*:*:* Versions 7.1611 Vulnerable ·Centos
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.8:*:*:*:*:*:*:* Versions 6.8 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.9:*:*:*:*:*:*:* Versions 6.9 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 2.6.25 to before 3.2.70; 3.3 to before 3.4.109; 3.5 to before 3.10.77; 3.11 to before 3.12.43; 3.13 to before 3.14.41; 3.15 to before 3.16.35; 3.17 to before 3.18.14; 3.19 to before 3.19.7; 4.0 to before 4.0.2 Vulnerable ·Linux
Remediation
Red Hat 11 advisories
- RHSA-2017:2795 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-696.10.3.el6, kernel-abi-whitelists-2.6.32-696.10.3.el6, kernel-debug-2.6.32-696.10.3.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-696.10.3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-696.10.3.el6, kernel-abi-whitelists-2.6.32-696.10.3.el6, kernel-debug-2.6.32-696.10.3.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-696.10.3.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-696.10.3.el6, kernel-abi-whitelists-2.6.32-696.10.3.el6, kernel-bootwrapper-2.6.32-696.10.3.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-696.10.3.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-696.10.3.el6, kernel-abi-whitelists-2.6.32-696.10.3.el6, kernel-debug-2.6.32-696.10.3.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-696.10.3.el6
- RHSA-2017:2802 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Long Life (v. 5.9 server) kernel-2.6.18-348.34.2.el5, kernel-PAE-2.6.18-348.34.2.el5, kernel-PAE-devel-2.6.18-348.34.2.el5 +8
- RHSA-2017:2801 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server (v. 5 ELS) kernel-2.6.18-423.el5, kernel-PAE-2.6.18-423.el5, kernel-PAE-devel-2.6.18-423.el5 +10
Show 8 more Red Hat advisories
- RHSA-2017:2796 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux HPC Node EUS (v. 6.7) kernel-2.6.32-573.48.1.el6, kernel-abi-whitelists-2.6.32-573.48.1.el6, kernel-debug-2.6.32-573.48.1.el6 +6
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf-2.6.32-573.48.1.el6
- Red Hat Enterprise Linux Server EUS (v. 6.7) kernel-2.6.32-573.48.1.el6, kernel-abi-whitelists-2.6.32-573.48.1.el6, kernel-bootwrapper-2.6.32-573.48.1.el6 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf-2.6.32-573.48.1.el6
- RHSA-2017:2793 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.32.3.el7, kernel-abi-whitelists-3.10.0-514.32.3.el7, kernel-debug-3.10.0-514.32.3.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.32.3.el7
- Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.32.3.el7, kernel-abi-whitelists-3.10.0-514.32.3.el7, kernel-bootwrapper-3.10.0-514.32.3.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.32.3.el7, kernel-tools-libs-devel-3.10.0-514.32.3.el7
- RHSA-2017:2794 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) kernel-3.10.0-327.59.3.el7, kernel-abi-whitelists-3.10.0-327.59.3.el7, kernel-debug-3.10.0-327.59.3.el7 +8
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.59.3.el7
- Red Hat Enterprise Linux Server EUS (v. 7.2) kernel-3.10.0-327.59.3.el7, kernel-abi-whitelists-3.10.0-327.59.3.el7, kernel-bootwrapper-3.10.0-327.59.3.el7 +11
- Red Hat Enterprise Linux Server Optional EUS (v. 7.2) kernel-debug-devel-3.10.0-327.59.3.el7, kernel-tools-libs-devel-3.10.0-327.59.3.el7
- RHSA-2017:2797 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 6.6) kernel-2.6.32-504.63.3.el6, kernel-abi-whitelists-2.6.32-504.63.3.el6, kernel-debug-2.6.32-504.63.3.el6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf-2.6.32-504.63.3.el6
- Red Hat Enterprise Linux Server Optional TUS (v. 6.6) python-perf-2.6.32-504.63.3.el6
- Red Hat Enterprise Linux Server TUS (v. 6.6) kernel-2.6.32-504.63.3.el6, kernel-abi-whitelists-2.6.32-504.63.3.el6, kernel-debug-2.6.32-504.63.3.el6 +6
- RHSA-2017:2798 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 6.5) kernel-2.6.32-431.85.1.el6, kernel-abi-whitelists-2.6.32-431.85.1.el6, kernel-debug-2.6.32-431.85.1.el6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel-2.6.32-431.85.1.el6, python-perf-2.6.32-431.85.1.el6
- Red Hat Enterprise Linux Server Optional TUS (v. 6.5) kernel-2.6.32-431.85.1.el6, python-perf-2.6.32-431.85.1.el6
- Red Hat Enterprise Linux Server TUS (v. 6.5) kernel-2.6.32-431.85.1.el6, kernel-abi-whitelists-2.6.32-431.85.1.el6, kernel-debug-2.6.32-431.85.1.el6 +6
- RHSA-2017:2799 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 6.4) kernel-2.6.32-358.84.1.el6, kernel-debug-2.6.32-358.84.1.el6, kernel-debug-devel-2.6.32-358.84.1.el6 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel-2.6.32-358.84.1.el6, python-perf-2.6.32-358.84.1.el6
- RHSA-2017:2800 Released 2017-09-26 · Red Hat rating Importantkernel security update
- Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.76.1.el6, kernel-debug-2.6.32-220.76.1.el6, kernel-debug-devel-2.6.32-220.76.1.el6 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.76.1.el6, python-perf-2.6.32-220.76.1.el6
- RHSA-2017:1842 Released 2017-08-01 · Red Hat rating Importantkernel security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-693.el7, kernel-abi-whitelists-3.10.0-693.el7, kernel-debug-3.10.0-693.el7 +7
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-693.el7, kernel-abi-whitelists-3.10.0-693.el7, kernel-debug-3.10.0-693.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-693.el7, kernel-abi-whitelists-3.10.0-693.el7, kernel-bootwrapper-3.10.0-693.el7 +10
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-693.el7, kernel-doc-3.10.0-693.el7, kernel-tools-libs-devel-3.10.0-693.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-693.el7, kernel-abi-whitelists-3.10.0-693.el7, kernel-debug-3.10.0-693.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-693.el7
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux ComputeNode EUS (v. 7.2) | Fixed | RHSA-2017:2794 |
| Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) | Fixed | RHSA-2017:2793 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.2) | Fixed | RHSA-2017:2794 |
| Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) | Fixed | RHSA-2017:2793 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux HPC Node EUS (v. 6.7) | Fixed | RHSA-2017:2796 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) | Fixed | RHSA-2017:2796 |
| Red Hat Enterprise Linux Long Life (v. 5.9 server) | Fixed | RHSA-2017:2802 |
| Red Hat Enterprise Linux Server (v. 5 ELS) | Fixed | RHSA-2017:2801 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux Server AUS (v. 6.2) | Fixed | RHSA-2017:2800 |
| Red Hat Enterprise Linux Server AUS (v. 6.4) | Fixed | RHSA-2017:2799 |
| Red Hat Enterprise Linux Server AUS (v. 6.5) | Fixed | RHSA-2017:2798 |
| Red Hat Enterprise Linux Server AUS (v. 6.6) | Fixed | RHSA-2017:2797 |
| Red Hat Enterprise Linux Server EUS (v. 6.7) | Fixed | RHSA-2017:2796 |
| Red Hat Enterprise Linux Server EUS (v. 7.2) | Fixed | RHSA-2017:2794 |
| Red Hat Enterprise Linux Server EUS (v. 7.3) | Fixed | RHSA-2017:2793 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.2) | Fixed | RHSA-2017:2800 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.4) | Fixed | RHSA-2017:2799 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.5) | Fixed | RHSA-2017:2798 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.6) | Fixed | RHSA-2017:2797 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.7) | Fixed | RHSA-2017:2796 |
| Red Hat Enterprise Linux Server Optional EUS (v. 7.2) | Fixed | RHSA-2017:2794 |
| Red Hat Enterprise Linux Server Optional EUS (v. 7.3) | Fixed | RHSA-2017:2793 |
| Red Hat Enterprise Linux Server Optional TUS (v. 6.5) | Fixed | RHSA-2017:2798 |
| Red Hat Enterprise Linux Server Optional TUS (v. 6.6) | Fixed | RHSA-2017:2797 |
| Red Hat Enterprise Linux Server TUS (v. 6.5) | Fixed | RHSA-2017:2798 |
| Red Hat Enterprise Linux Server TUS (v. 6.6) | Fixed | RHSA-2017:2797 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2017:1842 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2017:2795 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2017:1842 |
Not affected: 6 products
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux Client (v. 7)
- Red Hat Enterprise Linux ComputeNode (v. 7)
- Red Hat Enterprise Linux Server (v. 7)
- Red Hat Enterprise Linux Workstation (v. 7)
- Red Hat Enterprise MRG 2
Timeline
- 2024-09-09 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2017-1000253
- 2026-10-03 Alias added: GHSA-rm92-8pw8-34fm
- 2026-11-05 Affected versions changed · Red Hat
References
More Linux Kernel vulnerabilities
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
- TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
- TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
- TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
- TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
Sources
- CVE-2017-1000253 · CVE Program
- CVE-2017-1000253 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-rm92-8pw8-34fm · GitHub Advisory Database · CC BY 4.0
- CVE-2017-1000253 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences