PT-2017-2358 · Linux+4 · Linux Kernel+4

Di Shen · Published 2017-01-14 · Updated 2024-02-09 · CVE-2017-6001

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.7

Description The issue is related to a race condition in the kernel/events/core.c component of the Linux kernel. It allows local users to gain privileges via a crafted application that makes concurrent perf event open system calls for moving a software group into a hardware context. This is due to incomplete checking of resource state when it can be shared.

Recommendations For Linux kernel versions prior to 4.9.7, update to version 4.9.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the perf event open system call to minimize the risk of exploitation.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2017-1127

ALT-PU-2017-1330

BDU:2017-01557

CESA-2017_1842

CESA-2018_1854

CVE-2017-6001

DLA-833-1

DSA-3791-1

MGASA-2017-0136

MGASA-2017-0147

MGASA-2017-0148

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017:2669

RHSA-2017_1842

RHSA-2017_2077

RHSA-2018:1854

RHSA-2018_1854

USN-3312-1

USN-3312-2

USN-3361-1

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Ubuntu

References · 102

• https://github.com/torvalds/linux/commit/321027c1fe77f892f4ea07846aeae08cefbbb290 · Patch
• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5551 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7261 · Vendor Advisory
• http://debian.org/security/2017/dsa-3791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8636 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:2077 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-9755 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1422825 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-6001 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8925 · Vendor Advisory