ByteOS Network

NVD Vulnerability Details :

CVE-2017-12146

Deferred

Source-cve@mitre.org

Published At-08 Sep, 2017 | 19:29

Updated At-20 Apr, 2025 | 01:37

The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.17(inclusive) to 3.18.61(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 3.19(inclusive) to 4.1.43(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.2(inclusive) to 4.4.77(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.5(inclusive) to 4.9.37(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.10(inclusive) to 4.11.10(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.12(inclusive) to 4.12.1(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-362	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154	cve@mitre.org	Issue Tracking Patch Third Party Advisory
http://www.debian.org/security/2017/dsa-3981	cve@mitre.org	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1	cve@mitre.org	Release Notes Vendor Advisory
http://www.securityfocus.com/bid/100651	cve@mitre.org	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1489078	cve@mitre.org	Issue Tracking Patch Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1057474	cve@mitre.org	Issue Tracking Patch Third Party Advisory
https://github.com/torvalds/linux/commit/6265539776a0810b7ce6398c27866ddb9c6bd154	cve@mitre.org	Issue Tracking Patch Third Party Advisory
https://source.android.com/security/bulletin/2017-09-01	cve@mitre.org	Patch Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6265539776a0810b7ce6398c27866ddb9c6bd154	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
http://www.debian.org/security/2017/dsa-3981	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.1	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
http://www.securityfocus.com/bid/100651	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1489078	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1057474	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
https://github.com/torvalds/linux/commit/6265539776a0810b7ce6398c27866ddb9c6bd154	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch Third Party Advisory
https://source.android.com/security/bulletin/2017-09-01	af854a3a-2127-422b-91ae-364da2661108	Patch Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History