PT-2017-2358 · Linux+4 · Linux Kernel+4
Di Shen
·
Publicado
2017-01-14
·
Atualizado
2024-02-09
·
CVE-2017-6001
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.9.7
Description
The issue is related to a race condition in the kernel/events/core.c component of the Linux kernel. It allows local users to gain privileges via a crafted application that makes concurrent perf event open system calls for moving a software group into a hardware context. This is due to incomplete checking of resource state when it can be shared.
Recommendations
For Linux kernel versions prior to 4.9.7, update to version 4.9.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the perf event open system call to minimize the risk of exploitation.
Correção
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Ubuntu