PT-2017-15457 · Linux+5 · Linux Kernel+5

Aleksandr Popov + 1 · Published 2017-03-07 · Updated 2025-01-17 · CVE-2017-2636

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.10.1

Description A race condition in the Linux kernel allows local users to gain privileges or cause a denial of service by setting the HDLC line discipline. This issue affects the drivers/tty/n hdlc.c component. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Linux kernel versions through 4.10.1, update to a version later than 4.10.1 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Exploit

Fix

DoS

Race Condition

Double Free

Weakness Enumeration

CWE-362

CWE-415

Related Identifiers

ALT-PU-2017-1293

ALT-PU-2017-1299

CESA-2017_0892

CESA-2017_0933

CVE-2017-2636

DLA-849-1

DSA-3804-1

ELSA-2017-0892

ELSA-2017-0933

ELSA-2017-0933-1

ELSA-2017-3533

ELSA-2017-3534

ELSA-2017-3535

MGASA-2017-0088

MGASA-2017-0089

MGASA-2017-0090

OPENSUSE-SU-2017_0906-1

OPENSUSE-SU-2017_0907-1

RHSA-2017:0892

RHSA-2017:0931

RHSA-2017:0932

RHSA-2017:0933

RHSA-2017:0986

RHSA-2017:1125

RHSA-2017:1126

RHSA-2017:1232

RHSA-2017:1233

RHSA-2017:1488

RHSA-2017_0892

RHSA-2017_0931

RHSA-2017_0933

SUSE-SU-2017:0864-1

SUSE-SU-2017:0865-1

SUSE-SU-2017:0866-1

SUSE-SU-2017:0912-1

SUSE-SU-2017:0913-1

SUSE-SU-2017:1990-1

SUSE-SU-2017:2043-1

SUSE-SU-2017:2049-1

SUSE-SU-2017:2060-1

SUSE-SU-2017:2061-1

SUSE-SU-2017:2062-1

SUSE-SU-2017:2063-1

SUSE-SU-2017:2065-1

SUSE-SU-2017:2067-1

SUSE-SU-2017:2068-1

SUSE-SU-2017:2072-1

SUSE-SU-2017:2073-1

SUSE-SU-2017:2088-1

SUSE-SU-2017:2092-1

SUSE-SU-2017:2093-1

SUSE-SU-2017:2095-1

SUSE-SU-2017:2096-1

SUSE-SU-2017:2099-1

SUSE-SU-2017:2342-1

SUSE-SU-2017_0864-1

SUSE-SU-2017_0865-1

SUSE-SU-2017_0866-1

SUSE-SU-2017_0912-1

SUSE-SU-2017_0913-1

SUSE-SU-2017_2049-1

SUSE-SU-2017_2060-1

SUSE-SU-2017_2061-1

SUSE-SU-2017_2072-1

SUSE-SU-2017_2073-1

SUSE-SU-2017_2088-1

SUSE-SU-2017_2092-1

SUSE-SU-2017_2093-1

SUSE-SU-2017_2095-1

SUSE-SU-2017_2096-1

SUSE-SU-2017_2099-1

SUSE-SU-2025:0152-1

SUSE-SU-2025_0152-1

USN-3218-1

USN-3219-1

USN-3219-2

USN-3220-1

USN-3220-2

USN-3220-3

USN-3221-1

USN-3221-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 644

• 🔥 https://a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2017:2072-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2068-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-2636 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3219-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3221-2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:1233 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3219-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3220-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2096-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3220-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2062-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3220-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:2043-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:0932 · Vendor Advisory