Linux Kernel CVE-2017-1000405 Local Race Condition Vulnerability

Bugtraq ID:	102032
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 30 2017 12:00AM
Updated:	Jan 16 2018 09:00AM
Credit:	Eylon Ben Yaakov and Daniel Shapiro.
Vulnerable:	McAfee Web Gateway 7.6.2.0 Linux kernel 4.13.11 Linux kernel 4.13.10 Linux kernel 4.11.9 Linux kernel 4.11.5 Linux kernel 4.11.4 Linux kernel 4.11.3 Linux kernel 4.11.2 Linux kernel 4.11.1 Linux kernel 4.11 Linux kernel 4.10.15 Linux kernel 4.10.13 Linux kernel 4.10.12 Linux kernel 4.10.10 Linux kernel 4.10.6 Linux kernel 4.10.4 Linux kernel 4.10 Linux kernel 4.9.13 Linux kernel 4.9.8 Linux kernel 4.9.4 Linux kernel 4.9.3 Linux kernel 4.7.4 Linux kernel 4.4.30 Linux kernel 4.4.29 Linux kernel 4.4.28 Linux kernel 4.4.27 Linux kernel 4.4.25 Linux kernel 4.4.24 + SuSE Linux 7.2 Linux kernel 4.4.23 Linux kernel 4.4.22 Linux kernel 4.4.7 Linux kernel 4.4.2 Linux kernel 4.2.3 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 3.19.3 Linux kernel 3.18.22 Linux kernel 3.18.17 Linux kernel 3.18.11 Linux kernel 3.18.8 Linux kernel 3.18.7 Linux kernel 3.18.3 Linux kernel 3.18.2 Linux kernel 3.18.1 Linux kernel 3.17.4 Linux kernel 3.17.2 Linux kernel 3.16.7 Linux kernel 3.16.2 Linux kernel 3.16.1 Linux kernel 3.15.10 Linux kernel 3.15.5 Linux kernel 3.15.2 Linux kernel 3.14.54 Linux kernel 3.14.45 Linux kernel 3.14.37 Linux kernel 3.14.4 Linux kernel 3.14.3 Linux kernel 3.14.2 Linux kernel 3.13.11 Linux kernel 3.13.9 Linux kernel 3.13.3 Linux kernel 3.13.1 Linux kernel 3.12.49 Linux kernel 3.12.48 Linux kernel 3.12.44 Linux kernel 3.12.40 Linux kernel 3.12.21 Linux kernel 3.12.18 Linux kernel 3.12.17 Linux kernel 3.12.16 Linux kernel 3.12.11 Linux kernel 3.12.7 Linux kernel 3.12.4 Linux kernel 3.12.3 Linux kernel 3.12.2 Linux kernel 3.11.3 Linux kernel 3.10.90 Linux kernel 3.10.81 Linux kernel 3.10.73 Linux kernel 3.10.45 Linux kernel 3.10.41 Linux kernel 3.10.38 Linux kernel 3.10.37 Linux kernel 3.10.36 Linux kernel 3.10.30 Linux kernel 3.10.27 Linux kernel 3.10.26 Linux kernel 3.10.23 Linux kernel 3.10.22 Linux kernel 3.10.21 Linux kernel 3.10.14 Linux kernel 3.10.10 Linux kernel 3.10.9 Linux kernel 3.10.7 Linux kernel 3.10 Linux kernel 3.1.8 Linux kernel 3.0.98 Linux kernel 3.0.75 Linux kernel 3.0.72 Linux kernel 3.0.69 Linux kernel 3.0.65 Linux kernel 3.0.60 Linux kernel 3.0.59 Linux kernel 3.0.58 Linux kernel 3.0.37 Linux kernel 3.0.34 Linux kernel 3.0.5 Linux kernel 3.0.4 Linux kernel 3.0.2 Linux kernel 3.0.1 Linux kernel 2.6.38 Linux kernel 4.9.9 Linux kernel 4.9.11 Linux kernel 4.8.7 Linux kernel 4.8.6 Linux kernel 4.8.3 Linux kernel 4.8.13 Linux kernel 4.8.12 Linux kernel 4.8.1 Linux kernel 4.7.9 Linux kernel 4.7-rc5 Linux kernel 4.6.3 Linux kernel 4.6.2 Linux kernel 4.6.1 Linux kernel 4.5.5 Linux kernel 4.5 Linux kernel 4.4.38 Linux kernel 4.4.26 Linux kernel 4.4.14 Linux kernel 4.4.1 Linux kernel 4.4.0-57 Linux kernel 4.3.3 Linux kernel 4.2.8 Linux kernel 4.14 Linux kernel 4.13.1 Linux kernel 4.12 Linux kernel 4.11.8 Linux kernel 4.11.7 Linux kernel 4.10.9 Linux kernel 4.10.8 Linux kernel 4.10.7 Linux kernel 4.10.5 Linux kernel 4.10.3 Linux kernel 4.10.2 Linux kernel 4.10.11 Linux kernel 4.10.1 Linux kernel 4.1.15 Linux kernel 3.19-rc7 Linux kernel 3.19-rc2 Linux kernel 3.19-rc Linux kernel 3.19 Linux kernel 3.18.9 Linux kernel 3.18 Linux kernel 3.17.6 Linux kernel 3.17-rc3 Linux kernel 3.17 Linux kernel 3.16.6 Linux kernel 3.16.36 Linux kernel 3.16.0-28 Linux kernel 3.16 Linux kernel 3.15.6-200.fc20 Linux kernel 3.15-rc3 Linux kernel 3.15-rc2 Linux kernel 3.15-rc1 Linux kernel 3.15 Linux kernel 3.14.79 Linux kernel 3.14.73 Linux kernel 3.14.7 Linux kernel 3.14.5 Linux kernel 3.14-rc7 Linux kernel 3.14-rc4 Linux kernel 3.14-rc3 Linux kernel 3.14-rc2 Linux kernel 3.14-rc1 Linux kernel 3.14-4 Linux kernel 3.14-1 Linux kernel 3.14 Linux kernel 3.13.7 Linux kernel 3.13.6 Linux kernel 3.13.5 Linux kernel 3.13.4 Linux kernel 3.13.11-ckt27 Linux kernel 3.13.0 Linux kernel 3.13-rc1 Linux kernel 3.13 Linux kernel 3.12.22 Linux kernel 3.12.15 Linux kernel 3.12.14 Linux kernel 3.12.12 Linux kernel 3.12.1 Linux kernel 3.12 Linux kernel 3.11.9 Linux kernel 3.11.6 Linux kernel 3.11-rc7 Linux kernel 3.11-rc4 Linux kernel 3.11-rc1 Linux kernel 3.11 Linux kernel 3.10.5 Linux kernel 3.10.43 Linux kernel 3.10.31 Linux kernel 3.10.20 Linux kernel 3.10.17 Linux kernel 3.10-rc5 Linux kernel 3.10 Linux kernel 3.1-rc1 Linux kernel 3.1 Linux kernel 3.0.66 Linux kernel 3.0.62 Linux kernel 3.0.18 Linux kernel 3.0-rc4-git1 Linux kernel 3.0-rc1 Linux kernel 3.0 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2
Not Vulnerable:

Linux Kernel CVE-2017-1000405 Local Race Condition Vulnerability

The Linux Kernel is prone to a local race-condition vulnerability.

An attacker can exploit this issue to modify arbitrary files in the context of the affected system or cause denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.

Linux kernel 2.6.38 through 4.14 are vulnerable; other versions may also be affected.

Linux Kernel CVE-2017-1000405 Local Race Condition Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Linux Kernel CVE-2017-1000405 Local Race Condition Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel CVE-2017-1000405 Local Race Condition Vulnerability

References:

• �??Huge Dirty COW�?� (CVE-2017�??1000405) (Bindecy)
  
• Bug 1516514 - (CVE-2017-1000405) CVE-2017-1000405 kernel: pmd can become dirty w (Red Hat)
  
• CVE-2017-1000405 (Red Hat)
  
• Linux Homepage (Linux)
  
• mm, thp: Do not make page table dirty unconditionally in touch_p[mu]d() (Linux)