CVE-2017-2636: debian debian_linux
Modified
AliasesSUSE-SU-2017:0912-1SUSE-SU-2017:0913-1RHSA-2017:0986RHSA-2017:1125RHSA-2017:1126RHSA-2017:1232RHSA-2017:1233UBUNTU-CVE-2017-2636USN-3219-1USN-3220-1USN-3220-2USN-3220-3USN-3221-2DEBIAN-CVE-2017-2636
Published 07-03-2017Last modified 05-08-2024
Vulnerability summary
CVE-2017-2636 is a high (CVSS 7.0) vulnerability in debian debian_linux. EPSS estimates a 1.03% chance of exploitation in the next 30 days, higher than 63.7% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
7.0/10
010
High · v3.1 (NVD)EPSS score
1.03%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 33 · Related 23DLA-849-1DSA-3804-1MGASA-2017-0088MGASA-2017-0089MGASA-2017-0090RHSA-2017:0892RHSA-2017:0931RHSA-2017:0932RHSA-2017:0933RHSA-2017:1488SUSE-SU-2017:0864-1SUSE-SU-2017:0865-1SUSE-SU-2017:0866-1SUSE-SU-2017:1990-1SUSE-SU-2017:2043-1SUSE-SU-2017:2049-1SUSE-SU-2017:2060-1SUSE-SU-2017:2061-1SUSE-SU-2017:2062-1SUSE-SU-2017:2063-1SUSE-SU-2017:2065-1SUSE-SU-2017:2067-1SUSE-SU-2017:2068-1SUSE-SU-2017:2072-1SUSE-SU-2017:2073-1SUSE-SU-2017:2088-1SUSE-SU-2017:2092-1SUSE-SU-2017:2093-1SUSE-SU-2017:2095-1SUSE-SU-2017:2096-1SUSE-SU-2017:2099-1SUSE-SU-2017:2342-1SUSE-SU-2025:0152-1
Timeline
- 07-03-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.
CVSS metrics
6 scores · 4 sources · 3 versionsHigh 7.0Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.8Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Medium 6.9Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
1.03%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.03% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
- CWE-415Double FreeThe product calls free() twice on the same memory address.
Affected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse55 products
- kernel-bigmem&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.101-97.1
- kernel-bigmem&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.101-97.1
- kernel-bigsmp&distro=SUSE Linux Enterprise Server 11 SP3-LTSS< 3.0.101-0.47.99.1
- kernel-bigsmp&distro=SUSE Manager 2.1< 3.0.101-0.47.99.1
- kernel-bigsmp&distro=SUSE Manager Proxy 2.1< 3.0.101-0.47.99.1
Redhat27 products
- kernel< 0:2.6.32-358.78.1.el6 | < 0:3.10.0-327.53.1.el7 | < 0:2.6.32-220.71.1.el6 | < 0:2.6.32-431.80.1.el6 | < 0:2.6.32-573.42.1.el6
- kernel-abi-whitelists< 0:3.10.0-327.53.1.el7 | < 0:2.6.32-431.80.1.el6 | < 0:2.6.32-573.42.1.el6
- kernel-bootwrapper< 0:3.10.0-327.53.1.el7 | < 0:2.6.32-573.42.1.el6
- kernel-debug< 0:2.6.32-358.78.1.el6 | < 0:3.10.0-327.53.1.el7 | < 0:2.6.32-220.71.1.el6 | < 0:2.6.32-431.80.1.el6 | < 0:2.6.32-573.42.1.el6
- kernel-debug-debuginfo< 0:2.6.32-358.78.1.el6 | < 0:3.10.0-327.53.1.el7 | < 0:2.6.32-220.71.1.el6 | < 0:2.6.32-431.80.1.el6 | < 0:2.6.32-573.42.1.el6
Ubuntu7 products
- linux< 3.13.0-112.159 | < 4.4.0-66.87
- linux-aws< 4.4.0-1007.16
- linux-gke< 4.4.0-1005.6
- linux-hwe< 4.8.0-41.44~16.04.1
- linux-lts-xenial< 4.4.0-66.87~14.04.1
Debian2 products
- linux< 4.9.16-1
- debian_linuxEOL8.0
Linux1 product
- linux_kernel≥ 2.6.31, < 3.2.87 | ≥ 3.3, < 3.10.106 | ≥ 3.11, < 3.12.72 | ≥ 3.13, < 3.16.42 | ≥ 3.17, < 3.18.49 | ≥ 3.19, < 4.1.49 | ≥ 4.2, < 4.4.54 | ≥ 4.5, < 4.9.15 | ≥ 4.10, < 4.10.3
5 vendors · 92 products
References
40 links- www.openwall.com/lists/oss-security/2017/03/07/6Mailing ListX Refsource MLISTPatchThird Party AdvisoryREPORT
- bugzilla.redhat.com/show_bug.cgi?id=1428319X Refsource CONFIRMIssue TrackingMitigationThird Party AdvisoryREPORT
- access.redhat.com/errata/RHSA-2017:1125Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2017:1232Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
Show all 40 references
- access.redhat.com/errata/RHSA-2017:1233Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2017:0986Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2017:1126Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
