7.8

CVE-2017-7889: canonical ubuntu_linux

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2017-7889DEBIAN-CVE-2017-7889
Published 17-04-2017Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2017-7889 is a high (CVSS 7.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23.5% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.32%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 6
DLA-1099-1DSA-3945-1RHSA-2017:1842RHSA-2017:2077RHSA-2017:2669RHSA-2018:1854

Timeline

  1. 17-04-2017
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte (and bypass slab-allocation access restrictions) via an application that opens the /dev/mem file, related to arch/x86/mm/init.c and drivers/char/mem.c.

CVSS metrics

5 scores · 3 sources · 3 versions

EPSS trend

Probability

0.32%

Chance of exploitation in the next 30 days

Percentile

24%

Versus all other CVEs

30-day change

+0.01 pp

From 0.31% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.32%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu21 products
  • linux< 3.13.0-142.191 | < 4.4.0-79.100
  • linux-aws< 4.4.0-1018.27
  • linux-azureAll versions (No fix recorded)
  • linux-azure-6.11All versions (No fix recorded)
  • linux-azure-fdeAll versions (No fix recorded)
Debian2 products
Canonical1 product
Linux1 product
  • linux_kernel< 3.2.91 | ≥ 3.3, < 3.10.107 | ≥ 3.11, < 3.12.74 | ≥ 3.13, < 3.16.46 | ≥ 3.17, < 3.18.50 | ≥ 3.19, < 4.1.41 | ≥ 4.2, < 4.4.63 | ≥ 4.5, < 4.9.24 | ≥ 4.10, < 4.10.12

4 vendors · 25 products

References

21 links
Show all 21 references