CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability

KEVRansomware

Analyzed

AliasesSUSE-SU-2017:2723-1SUSE-SU-2017:2725-1RHSA-2017:2793+11 more

Published 04-10-2017Last modified 21-10-2025

Vulnerability summary

CVE-2017-1000253 is a high (CVSS 7.8) vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 09-09-2024. It has been used in ransomware campaigns. EPSS estimates a 10.70% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Act nowransomware

Known ransomware use (CISA, 09-09-2024)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

10.70%

0%100%

Medium · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareKnown useFlagged by CISA

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 3 · Related 2

RHSA-2017:1842 SUSE-SU-2017:3165-1 SUSE-SU-2025:0152-1

Timeline

04-10-2017
PublishedVulnerability first disclosed.
09-09-2024
Added to CISA KEVExploitedLinux Kernel PIE Stack Buffer Corruption Vulnerability
30-09-2024
CISA remediation dueDeadline passedApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
21-10-2025
Last modifiedVulnerability information updated.

Description

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary.

CVSS metrics

7 scores · 5 sources · 3 versions

v3.17.8v3.07.8v2.07.2

EPSS trend

Probability

10.70%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 10.70% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 09-09-2024
Federal due date: 30-09-2024

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. nvd.nist.gov/vuln/detail/CVE-2017-1000253

Public exploits

1 found

exploit-databaselocallinuxUnverified
Linux Kernel 3.10.0-514.21.2.el7.x86_64 / 3.10.0-514.26.1.el7.x86_64 (CentOS 7) - SUID Position Independent Executable 'PIE' Local Privilege Escalation
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat35 products

enterprise_linuxEOL6.0 | 6.1 | 6.2 | 6.3 | 6.4 | 6.5 | 6.6 | 6.7 | 6.8 | 6.9 | 7.0 | 7.1 | 7.2 | 7.3
kernel< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-abi-whitelists< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6
kernel-bootwrapper< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6
kernel-debug< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5

kernel-debug-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-debug-devel< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-debuginfo-common< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-debuginfo-common-i686< 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6
kernel-debuginfo-common-ppc64< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6
kernel-debuginfo-common-ppc64le< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7
kernel-debuginfo-common-s390x< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6
kernel-debuginfo-common-x86_64< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6
kernel-devel< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-doc< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-firmware< 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6
kernel-headers< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6 | < 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-kdump< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.18-423.el5
kernel-kdump-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.18-423.el5
kernel-kdump-devel< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.18-423.el5
kernel-PAE< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-PAE-debuginfo< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-PAE-devel< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-tools< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7
kernel-tools-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7
kernel-tools-libs< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7
kernel-tools-libs-devel< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7
kernel-xen< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-xen-debuginfo< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
kernel-xen-devel< 0:2.6.18-423.el5 | < 0:2.6.18-348.34.2.el5
perf< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6
perf-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6
python-perf< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6
python-perf-debuginfo< 0:3.10.0-514.32.3.el7 | < 0:3.10.0-327.59.3.el7 | < 0:2.6.32-696.10.3.el6 | < 0:2.6.32-573.48.1.el6 | < 0:2.6.32-504.63.3.el6 | < 0:2.6.32-431.85.1.el6 | < 0:2.6.32-358.84.1.el6 | < 0:2.6.32-220.76.1.el6

Show all 35

Suse34 products

kernel-bigmem&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-bigmem&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-bigsmp&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-default&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-default&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1

kernel-default&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-docs&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 3.0.101-108.13.2
kernel-ec2&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-ec2&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-pae&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-pae&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-pae&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-pae&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-ppc64&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-ppc64&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-source&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-source&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-source&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-syms&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-syms&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-trace&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-trace&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-trace&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1
kernel-xen&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 3.0.101-0.47.106.8.1
kernel-xen&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.106.8.1
kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-108.13.1
kernel-xen&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-108.13.1

Show all 34

Centos1 product

centosEOL6.0 | 6.1 | 6.2 | 6.3 | 6.4 | 6.5 | 6.6 | 6.7 | 6.8 | 6.9 | 7.1406 | 7.1503 | 7.1511 | 7.1611

Debian1 product

linux< 4.0.2-1

Linux1 product

linux_kernel≥ 2.6.25, < 3.2.70 | ≥ 3.3, < 3.4.109 | ≥ 3.5, < 3.10.77 | ≥ 3.11, < 3.12.43 | ≥ 3.13, < 3.14.41 | ≥ 3.15, < 3.16.35 | ≥ 3.17, < 3.18.14 | ≥ 3.19, < 3.19.7 | ≥ 4.0, < 4.0.2

Ubuntu1 product

linux< 3.13.0-57.95

6 vendors · 73 products

References

37 links

access.redhat.com/errata/RHSA-2017:2798Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:2795Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securitytracker.com/id/1039434VDB EntryX Refsource SECTRACKThird Party Advisory
access.redhat.com/errata/RHSA-2017:2801Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:2796Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securityfocus.com/bid/101010VDB EntryX Refsource BIDThird Party Advisory
access.redhat.com/errata/RHSA-2017:2799Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:2794Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:2793Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:2797Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory

Show all 37 references

access.redhat.com/errata/RHSA-2017:2802Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txtX Refsource MISCPatchThird Party AdvisoryARTICLE
access.redhat.com/errata/RHSA-2017:2800Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-1000253Government ResourceUS Government Resource
www.suse.com/support/update/announcement/2017/suse-su-20172723-1/Advisory
bugzilla.suse.com/1059525REPORT
www.suse.com/security/cve/CVE-2017-1000253WEB
www.suse.com/support/update/announcement/2017/suse-su-20172725-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/security/vulnerabilities/3189592ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1492212REPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2793.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-1000253REPORT
www.cve.org/CVERecord?id=CVE-2017-1000253AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-1000253Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLEREPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2794.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2795.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2796.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2797.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2798.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2799.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2800.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2801.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2802.jsonAdvisory
ubuntu.com/security/CVE-2017-1000253REPORT
security-tracker.debian.org/tracker/CVE-2017-1000253Advisory