CVE-2017-10661
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
- CVSS 3.1
- 7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 13.48% probability · 96th percentile
- Public exploits
- 1 in Exploit-DB · first 15 December 2017
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- linux/linux kernel · redhat/enterprise linux · redhat/enterprise linux aus · redhat/enterprise linux server eus · redhat/enterprise linux server for power little endian update services for sap solutions · debian/debian linux
- Source
- cve@mitre.org
EPSS 13.5% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6Issue Tracking, Patch, Third Party Advisory
- http://www.debian.org/security/2017/dsa-3981Mailing List, Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/100215Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3083Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4057Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4058Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0036Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1481136Issue Tracking
- https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6Issue Tracking, Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2017-08-01Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/43345/Third Party Advisory, VDB Entry
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1e38da300e1e395a15048b0af1e5305bd91402f6Issue Tracking, Patch, Third Party Advisory
- http://www.debian.org/security/2017/dsa-3981Mailing List, Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.15Release Notes, Vendor Advisory
- http://www.securityfocus.com/bid/100215Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3083Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3096Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4057Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:4058Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0036Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1481136Issue Tracking
- https://github.com/torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6Issue Tracking, Patch, Third Party Advisory
- https://source.android.com/security/bulletin/2017-08-01Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/43345/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.