7.8

CVE-2017-1000371: linux linux_kernel

Modified
AliasesUBUNTU-CVE-2017-1000371DEBIAN-CVE-2017-1000371
Published 19-06-2017Last modified 05-08-2024

Vulnerability summary

CVE-2017-1000371 is a high (CVSS 7.8) vulnerability in linux linux_kernel. EPSS estimates a 2.58% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities. 2 public exploits are recorded.

Priority
Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 28-06-2017)

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
2.58%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits2exploit-database

Advisory lineage

Upstream 0 · Downstream 2
DSA-3981-1RHSA-2020:1524

Timeline

  1. 19-06-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

2.58%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.58% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found
  • exploit-databaselocallinux_x86Verified

    Linux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation

    Maturity: weaponized

  • exploit-databaselocallinux_x86Verified

    Linux Kernel - 'offset2lib' Stack Clash

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu16 products
  • linux< 4.4.0-93.116
  • linux-aws< 4.4.0-1032.41
  • linux-azureAll versions (No fix recorded)
  • linux-azure-fdeAll versions (No fix recorded)
  • linux-gcp< 4.13.0-1002.5 | All versions (No fix recorded)
Debian1 product
  • linux< 4.11.11-1
Linux1 product
  • linux_kernel≥ 4.1, < 4.1.43 | ≥ 4.2, < 4.4.78 | ≥ 4.5, < 4.9.39 | ≥ 4.10, < 4.11.12 | ≥ 4.12, < 4.12.3

3 vendors · 18 products

References

10 links