CVE-2017-17741

—

CVSS 3.0

6.5 medium

EPSS

<1%p38

Published

Dec 18, 2017 (Dec 18, 2017)

Modified

Jun 17, 2026

Description

The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a write_mmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.

Vendors: linux debian
Products: linux kernel, debian linux
Weakness: CWE-125
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.