Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2017-7533

HIGH7.0

Race condition in the fsnotify implementation in the Linux kernel through 4

Published Aug 5, 2017

Modified 1 years ago

No fix available

Details

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

References

WEBhttp://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=49d31c2f389acfe83417083e1208422b4091cd9e WEBhttp://openwall.com/lists/oss-security/2017/08/03/2 ADVISORYhttp://www.debian.org/security/2017/dsa-3927 ADVISORYhttp://www.debian.org/security/2017/dsa-3945 WEBhttp://www.openwall.com/lists/oss-security/2019/06/27/7 WEBhttp://www.openwall.com/lists/oss-security/2019/06/28/1 WEBhttp://www.openwall.com/lists/oss-security/2019/06/28/2 WEBhttp://www.securityfocus.com/bid/100123 WEBhttp://www.securitytracker.com/id/1039075 ADVISORYhttps://access.redhat.com/errata/RHSA-2017:2473 ADVISORYhttps://access.redhat.com/errata/RHSA-2017:2585 ADVISORYhttps://access.redhat.com/errata/RHSA-2017:2669 ADVISORYhttps://access.redhat.com/errata/RHSA-2017:2770 ADVISORYhttps://access.redhat.com/errata/RHSA-2017:2869 WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1468283 WEBhttps://github.com/torvalds/linux/commit/49d31c2f389acfe83417083e1208422b4091cd9e WEBhttps://patchwork.kernel.org/patch/9755753/WEBhttps://patchwork.kernel.org/patch/9755757/WEBhttps://source.android.com/security/bulletin/2017-12-01 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2017-7533 WEBhttps://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1408967.html

CVSS Analysis

CVSS v3.1

7.0

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedAug 5, 2017

ModifiedAug 5, 2024

CVE-2017-7533 | Mondoo Vulnerability Intelligence