CVE-2017-12146

Published: 08 September 2017

The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.

From the Ubuntu security team

Yonggang Guo discovered that a race condition existed in the driver subsystem in the Linux kernel. A local attacker could use this to possibly gain administrative privileges.

Priority

Medium

CVSS 3 base score: 7.0

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12146
• https://git.kernel.org/linus/6265539776a0810b7ce6398c27866ddb9c6bd154
• https://ubuntu.com/security/notices/USN-3508-1
• https://ubuntu.com/security/notices/USN-3508-2
• NVD
• Launchpad
• Debian