CVE-2017-10661

Description

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.

Weakness classification

• CWE-416: Use After Free

Primary references

• cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Release Notes, Vendor Advisory
• cve@mitre.org — Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Issue Tracking
• cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
• cve@mitre.org — Patch, Vendor Advisory