Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list corruption or use-after-free) via simultaneous file-descriptor operations that leverage improper might_cancel queueing.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10661.json"
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.92"
}
]
},
{
"events": [
{
"introduced": "3.3"
},
{
"fixed": "3.16.47"
}
]
},
{
"events": [
{
"introduced": "3.17"
},
{
"fixed": "3.18.52"
}
]
},
{
"events": [
{
"introduced": "3.19"
},
{
"fixed": "4.1.41"
}
]
},
{
"events": [
{
"introduced": "4.2"
},
{
"fixed": "4.4.67"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.27"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.10.15"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
}
]