CVE-2017-2636

—

CVSS 3.1

7.0 high

EPSS

1%p61

Published

Mar 7, 2017 (Mar 7, 2017)

Modified

Jun 17, 2026

Description

Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline.

Vendors: linux debian
Products: linux kernel, debian linux
Weakness: CWE-362, CWE-415
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news4 stories

Security Affairs newsletter Round 104

Security AffairsMar 19, 11:17 UTC · Mar 19, 2017Ransomware CVE-2017-5638 CVE-2017-2636

Linux Kernel Gets Patch For Years

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2017Vulnerability in the wildCVE-2017-2636

Five privilege escalation flaws fixed in Linux Kernel

Security AffairsMar 5, 08:11 UTC · Mar 5, 2021Vulnerability CVE-2021-26708 CVE-2019-18683 CVE-2017-2636

CVE-2017-2636 Linux kernel flaw was spotted after seven years and quickly fixed

Security AffairsMar 16, 19:08 UTC · Mar 16, 2017Vulnerability CVE-2017-2636