What is CVE-2017-7533?

CVE-2017-7533 is a high-severity vulnerability in Linux Kernel, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.0/10. Published 2017-08-05.

How severe is CVE-2017-7533?

High severity. CVSS v3 base score is 7.0 out of 10.

Is CVE-2017-7533 known to be exploited?

16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux Kernel

CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Vulnerability class: Race Condition

EPSS: 0.012 (65.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux Linux_kernel
N/a Linux Kernel Through 4.12.4 — versions Linux kernel through 4.12.4

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

Public proof-of-concept exploits

References

secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (Patch, Mailing List, Third Party Advisory, x_refsource_MISC)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Third Party Advisory)
secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2017-7533?: CVE-2017-7533 is a high-severity vulnerability in Linux Kernel, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.0/10. Published 2017-08-05.
How severe is CVE-2017-7533?: High severity. CVSS v3 base score is 7.0 out of 10.
Is CVE-2017-7533 known to be exploited?: 16 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.