CVE-2017-17052

🗓️ 29 Nov 2017 03:00:00Reported by mitreType

The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
CNVD	Linux Kernel 'kernel/fork.c' Memory Corruption Vulnerability	1 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-17052	29 Nov 201703:00	–	cvelist
Debian CVE	CVE-2017-17052	29 Nov 201703:00	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	10 Apr 201800:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel security update	18 Apr 201800:00	–	oraclelinux
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1484)	13 May 201900:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4062)	12 Apr 201800:00	–	nessus
Tenable Nessus	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4071)	19 Apr 201800:00	–	nessus
Tenable Nessus	OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0033)	18 Apr 201800:00	–	nessus

NVD

Node

linux linux_kernelRange4.7–4.9.46

linux linux_kernelRange4.10–4.12.10

Source	Link
securityfocus	www.securityfocus.com/bid/102009
git	www.git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/
github	www.github.com/torvalds/linux/commit/2b7e8665b4ff51c034c55df3cff76518d1a9ee3a
kernel	www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.10

13 May 2026 00:24Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

EPSS0.00051

CWE-416