CVE-2017-2636

🗓️ 07 Mar 2017 22:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov👁 300 Views🌐 WEB

CVE-2017-2636: Race condition in Linux kerne

Reporter	Title	Published	Views	Family All 284
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Open Source packages vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple packages as used in IBM Security QRadar Packet Capture are vulnerable to various security issues.	28 Oct 202017:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in Linux kernel	16 Jun 201822:02	–	ibm
ArchLinux	[ASA-201703-13] linux-zen: privilege escalation	16 Mar 201700:00	–	archlinux
ArchLinux	[ASA-201703-6] linux-lts: privilege escalation	12 Mar 201700:00	–	archlinux
ArchLinux	[ASA-201703-7] linux-grsec: privilege escalation	13 Mar 201700:00	–	archlinux
ArchLinux	[ASA-201703-8] linux: privilege escalation	14 Mar 201700:00	–	archlinux
Information Security Automation	Why you can’t update it all at once?	22 Apr 201720:25	–	avleonov
Broadcom	BSA-2017-285	17 May 201700:00	–	broadcom

NVD

Node

linux linux_kernelRange2.6.31–3.2.87

linux linux_kernelRange3.3–3.10.106

linux linux_kernelRange3.11–3.12.72

linux linux_kernelRange3.13–3.16.42

linux linux_kernelRange3.17–3.18.49

linux linux_kernelRange3.19–4.1.49

linux linux_kernelRange4.2–4.4.54

linux linux_kernelRange4.5–4.9.15

linux linux_kernelRange4.10–4.10.3

Node

Source	Link
access	www.access.redhat.com/errata/RHSA-2017:1232
access	www.access.redhat.com/errata/RHSA-2017:1125
access	www.access.redhat.com/errata/RHSA-2017:1126
a13xp0p0v	www.a13xp0p0v.github.io/2017/03/24/CVE-2017-2636.html
access	www.access.redhat.com/errata/RHSA-2017:1488
access	www.access.redhat.com/errata/RHSA-2017:0892
debian	www.debian.org/security/2017/dsa-3804
access	www.access.redhat.com/errata/RHSA-2017:1233
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2017:0933

Parameter	Position	Path	Description	CWE
TIOCSETD	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415
TCXONC	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415
TCFLSH	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415
TCIOFLUSH	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415
TCOOFF	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415
TCOON	path	/dev/ptmx	Race condition in the Linux kernel n_hdlc driver enabling double-free and local privilege escalation via /dev/ptmx when setting N_HDLC and triggering concurrent operations (PoC).	CWE-362, CWE-415

17 Jun 2026 01:16Current

7.1High risk

Vulners AI Score7.1

CVSS 26.9

CVSS 3.17

EPSS0.01029