CVE-2017-2636

HIGH

Linux Kernel < 3.2.87 - Race Condition

Title source: rule

Description

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Exploits (1)

nomisec WRITEUP 1 stars
by alexzorin · poc
https://github.com/alexzorin/cve-2017-2636-el

References (16)

Scores

CVSS v3 7.0
EPSS 0.0055
EPSS Percentile 67.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-415 CWE-362
Status draft

Affected Products (2)

linux/linux_kernel < 3.2.87
debian/debian_linux

Timeline

Published Mar 07, 2017
Tracked Since Feb 18, 2026