CVE

Id
102821  
CVE No.
CVE-2017-6001  
Status
Candidate  
Description
Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.  
Phase
Assigned (20170215)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
805911 102821 CVE-2017-6001 MLIST:[oss-security] 20170216 Linux: CVE-2017-6001: Incomplete fix for CVE-2016-6786: perf/core: Fix concurrent sys_perf_event_open() vs. "move_group" race  View
805912 102821 CVE-2017-6001 URL:http://www.openwall.com/lists/oss-security/2017/02/16/1  View
805913 102821 CVE-2017-6001 CONFIRM:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=321027c1fe77f892f4ea07846aeae08cefbbb290  View
805914 102821 CVE-2017-6001 CONFIRM:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.7  View
805915 102821 CVE-2017-6001 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1422825  View
805916 102821 CVE-2017-6001 CONFIRM:https://github.com/torvalds/linux/commit/321027c1fe77f892f4ea07846aeae08cefbbb290  View
805917 102821 CVE-2017-6001 BID:96264  View

Related JVN