Linux Kernel CVE-2017-7533 Local Race Condition Vulnerability

Bugtraq ID:	100123
Class:	Race Condition Error
CVE:	CVE-2017-7533
Remote:	No
Local:	Yes
Published:	Aug 03 2017 12:00AM
Updated:	Aug 18 2017 11:11AM
Credit:	Fan Wu and Shixiong Zhao
Vulnerable:	Redhat Enterprise Mrg 2 Redhat Enterprise Linux Workstation Optional 7 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Server Optional 7 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux ComputeNode Optional 7 Redhat Enterprise Linux ComputeNode 7 Redhat Enterprise Linux Client Optional 7 Redhat Enterprise Linux 7 Client Redhat Enterprise Linux 7 Linux kernel 4.11.9 Linux kernel 4.11.5 Linux kernel 4.11.4 Linux kernel 4.11.3 Linux kernel 4.11.2 Linux kernel 4.11.1 Linux kernel 4.11 Linux kernel 4.10.15 Linux kernel 4.10.13 Linux kernel 4.10.12 Linux kernel 4.10.10 Linux kernel 4.10.6 Linux kernel 4.10.4 Linux kernel 4.10 Linux kernel 4.9.13 Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.7.4 Linux kernel 4.4.30 Linux kernel 4.4.29 Linux kernel 4.4.28 Linux kernel 4.4.27 Linux kernel 4.4.25 Linux kernel 4.4.24 + S.u.S.E. Linux 7.2 Linux kernel 4.4.23 Linux kernel 4.4.22 Linux kernel 4.4.7 Linux kernel 4.4.2 Linux kernel 4.2.3 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 3.14.54 Linux kernel 3.14.37 Linux kernel 3.14.4 Linux kernel 3.14.3 Linux kernel 3.14.2 Linux kernel 4.9.9 Linux kernel 4.9.11 Linux kernel 4.8.7 Linux kernel 4.8.6 Linux kernel 4.8.3 Linux kernel 4.8.13 Linux kernel 4.8.12 Linux kernel 4.8.1 Linux kernel 4.7.9 Linux kernel 4.7-rc5 Linux kernel 4.6.3 Linux kernel 4.6.2 Linux kernel 4.6.1 Linux kernel 4.5.5 Linux kernel 4.5 Linux kernel 4.4.38 Linux kernel 4.4.26 Linux kernel 4.4.14 Linux kernel 4.4.1 Linux kernel 4.4.0-57 Linux kernel 4.3.3 Linux kernel 4.2.8 Linux kernel 4.12 Linux kernel 4.11.8 + Redhat Linux 6.2 sparc + Redhat Linux 6.2 i386 + Redhat Linux 6.2 alpha Linux kernel 4.11.7 Linux kernel 4.10.9 Linux kernel 4.10.8 Linux kernel 4.10.7 Linux kernel 4.10.5 Linux kernel 4.10.3 Linux kernel 4.10.2 Linux kernel 4.10.11 Linux kernel 4.10.1 Linux kernel 4.1.15 Linux kernel 3.14.79 Linux kernel 3.14.73 Linux kernel 3.14.7 Linux kernel 3.14.5 Linux kernel 3.14-rc1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Linux Kernel CVE-2017-7533 Local Race Condition Vulnerability

The Linux Kernel is prone to a local race-condition vulnerability.

An attacker can exploit this issue to cause denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.

Linux kernel 3.14-rc1 through 4.12 are vulnerable; other versions may also be affected.

Linux Kernel CVE-2017-7533 Local Race Condition Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel CVE-2017-7533 Local Race Condition Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel CVE-2017-7533 Local Race Condition Vulnerability

References:

• [CVE-2017-7533] kernel: inotify: a race between inotify_handle_event() and sys_ (Seclists.org)
  
• CVE-2017-7533 (Redhat)
  
• dentry name snapshots (Linux)
  
• Linux Homepage (Linux)
  
• Bug 1468283 - (CVE-2017-7533) CVE-2017-7533 kernel: a race between inotify_hand (Redhat)