Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-2636

24
FAUCET Score

CVE-2017-2636 is a race condition vulnerability in the n_hdlc.c driver of the Linux kernel, affecting versions up to 4.10.1, including Debian distributions. This flaw allows a local attacker to achieve privilege escalation or cause a denial of service through a double free by manipulating the HDLC line discipline. With a CVSS score of 7.0 (HIGH), exploitation requires low privileges and high attack complexity, but can lead to high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking public Metasploit or ExploitDB modules, there is community discussion indicating potential exploit development, including a Reddit post mentioning bypassing SMEP.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.31, < 3.2.87CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.3, < 3.10.106CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.11, < 3.12.72CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.13, < 3.16.42CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 3.17, < 3.18.49CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.0HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.0
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.02%
Probability of exploitation in next 30 days
EPSS Percentile
59.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0102 is in the 90th percentile among its peer group of 1,523 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (13)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise MRG 2Fixed in: kernel-rt-1:3.10.0-514.rt56.219.el6rt
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-696.1.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.2 Advanced Update SupportFixed in: kernel-0:2.6.32-220.71.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.4 Advanced Update SupportFixed in: kernel-0:2.6.32-358.78.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.5 Advanced Update SupportFixed in: kernel-0:2.6.32-431.80.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.5 Telco Extended Update SupportFixed in: kernel-0:2.6.32-431.80.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.6 Advanced Update SupportFixed in: kernel-0:2.6.32-504.60.2.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.6 Telco Extended Update SupportFixed in: kernel-0:2.6.32-504.60.2.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6.7 Extended Update SupportFixed in: kernel-0:2.6.32-573.42.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-rt-0:3.10.0-514.16.1.rt56.437.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: kernel-0:3.10.0-514.16.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.2 Extended Update SupportFixed in: kernel-0:3.10.0-327.53.1.el7
View patch
redhatworkaround availablevia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2017-2636Important

kernel: Race condition access to n_hdlc.tbuf causes double free in n_hdlc_release()

Mar 7, 2017

References

a13xp0p0v.github.io / 2017/03/24/CVE-2017-2636.html
Third Party Advisory
access.redhat.com / errata/RHSA-2017:0892
Third Party Advisory
access.redhat.com / errata/RHSA-2017:0931
Third Party Advisory
access.redhat.com / errata/RHSA-2017:0932
Third Party Advisory
access.redhat.com / errata/RHSA-2017:0933
Third Party Advisory
access.redhat.com / errata/RHSA-2017:0986
Third Party Advisory
access.redhat.com / errata/RHSA-2017:1125
Third Party Advisory
access.redhat.com / errata/RHSA-2017:1126
Third Party Advisory
access.redhat.com / errata/RHSA-2017:1232
Third Party Advisory
access.redhat.com / errata/RHSA-2017:1233
Third Party Advisory
access.redhat.com / errata/RHSA-2017:1488
Third Party Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingMitigationThird Party Advisory
debian.org / security/2017/dsa-3804
Third Party Advisory
openwall.com / lists/oss-security/2017/03/07/6
Mailing ListPatchThird Party Advisory
securityfocus.com / bid/96732
Third Party AdvisoryVDB Entry
securitytracker.com / id/1037963
Third Party AdvisoryVDB Entry