VULNERABILITY INTELLIGENCE
CVE-2017-6001
CVSS score7 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2017-02-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Primary references
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Release Notes, Vendor Advisory
- cve@mitre.org — Mailing List, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Issue Tracking, Patch
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry