Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-10661

33
FAUCET Score

CVE-2017-10661 is a race condition vulnerability in the Linux kernel (versions before 4.10.15) affecting Debian, Linux, and Red Hat distributions. This flaw allows local attackers to achieve privilege escalation or cause a denial of service through list corruption or use-after-free by manipulating simultaneous file-descriptor operations. Rated as High severity (CVSS 7.0), it requires high attack complexity and user interaction, but can lead to significant impact on confidentiality, integrity, and availability. While not actively exploited in the wild, a public exploit (EDB-43345) exists, yet there is minimal community discussion or media coverage surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 3.2.92CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.3, < 3.16.47CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.17, < 3.18.52CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.19, < 4.1.41CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.2, < 4.4.67CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.0HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.0
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
13.38%
Probability of exploitation in next 30 days
EPSS Percentile
96.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-43345 · Dec 15, 2017
This CVE's current EPSS score of 0.1338 is in the 98th percentile among its peer group of 386 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.0 Bluesky, 0.1 Mastodon, and 0.0 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

github_advisorypatch availablevia nvd_reference
View patch
googlepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-957.rt56.910.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-957.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Advanced Update SupportFixed in: kernel-0:3.10.0-693.61.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Telco Extended Update SupportFixed in: kernel-0:3.10.0-693.61.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.4 Update Services for SAP SolutionsFixed in: kernel-0:3.10.0-693.61.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.5 Extended Update SupportFixed in: kernel-0:3.10.0-862.46.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: kernel-rt-1:3.10.0-693.61.1.rt56.656.el6rt
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel
redhatend of lifevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: realtime-kernel

Vendor Advisories (1)

redhatCVE-2017-10661Moderate

kernel: Handling of might_cancel queueing is not properly pretected against race

Feb 10, 2017

References

git.kernel.org / cgit/linux/kernel/git/torvalds/linux.git/commit
Issue TrackingPatchThird Party Advisory
access.redhat.com / errata/RHSA-2018:3083
Third Party Advisory
access.redhat.com / errata/RHSA-2018:3096
Third Party Advisory
access.redhat.com / errata/RHSA-2019:4057
Third Party Advisory
access.redhat.com / errata/RHSA-2019:4058
Third Party Advisory
access.redhat.com / errata/RHSA-2020:0036
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue Tracking
github.com / torvalds/linux/commit/1e38da300e1e395a15048b0af1e5305bd91402f6
Issue TrackingPatchThird Party Advisory
source.android.com / security/bulletin/2017-08-01
PatchVendor Advisory
exploit-db.com / exploits/43345
Third Party AdvisoryVDB Entry
debian.org / security/2017/dsa-3981
Mailing ListThird Party Advisory
kernel.org / pub/linux/kernel/v4.x/ChangeLog-4.10.15
Release NotesVendor Advisory
securityfocus.com / bid/100215
Third Party AdvisoryVDB Entry