Every CVE Search/ Get API key

CVE-2017-1000371

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set...

7.8 HighPublic exploitFix available

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.58%Down 3.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
CVE-2017-1000371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
CVE-2017-1000371
Updated
2026-11-02
EUVDEUVD-2017-1530 No score

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
EUVD-2017-1530
Updated
2026-11-03
GitHub AdvisoriesGHSA-wr3q-fcxj-4873 7.8

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set...

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
GHSA-wr3q-fcxj-4873
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
CVE-2017-1000371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-1000371 7.8

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
DEBIAN-CVE-2017-1000371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1524 6.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2020:1524
CVSS 3.0
6.3 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-1000371 7.8

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1 Gigabyte of memory is allocated (the maximum under the 1/4 restriction) then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimum distance between the end of the PIE binary's read-write segment and the start of the stack becomes small enough that the stack guard page can be jumped over by an attacker. This affects Linux Kernel version 4.11.5. This is a different issue than CVE-2017-1000370 and CVE-2017-1000365. This issue appears to be limited to i386 based systems.

Record
UBUNTU-CVE-2017-1000371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux
Debian:12
 before 4.11.11-1
4.11.11-1
linux
Debian:13
 before 4.11.11-1
4.11.11-1
linux
Debian:14
 before 4.11.11-1
4.11.11-1
linux
Debian:8
From an advisory covering 16 CVEs
 before 3.16.43-2+deb8u5, plus listed versions
3.16.36-13.16.36-1+deb8u13.16.36-1+deb8u1~bpo70+13.16.36-1+deb8u23.16.36-1+deb8u2~bpo70+1
Show 45 moreShow less
3.16.39-13.16.39-1+deb8u13.16.39-1+deb8u1~bpo70+13.16.39-1+deb8u1~bpo70+1+gcc4.43.16.39-1+deb8u23.16.39-1~bpo70+13.16.43-13.16.43-23.16.43-2+deb8u13.16.43-2+deb8u23.16.43-2+deb8u33.16.43-2+deb8u43.16.7-ckt11-13.16.7-ckt11-1+deb8u13.16.7-ckt11-1+deb8u23.16.7-ckt11-1+deb8u2~bpo70+13.16.7-ckt11-1+deb8u33.16.7-ckt11-1+deb8u3~bpo70+13.16.7-ckt11-1+deb8u43.16.7-ckt11-1+deb8u4~bpo70+13.16.7-ckt11-1+deb8u53.16.7-ckt11-1+deb8u63.16.7-ckt11-1+deb8u6~bpo70+13.16.7-ckt11-1~bpo70+13.16.7-ckt17-13.16.7-ckt20-13.16.7-ckt20-1+deb8u13.16.7-ckt20-1+deb8u23.16.7-ckt20-1+deb8u2~bpo70+13.16.7-ckt20-1+deb8u33.16.7-ckt20-1+deb8u3~bpo70+13.16.7-ckt20-1+deb8u43.16.7-ckt20-1+deb8u4~bpo70+13.16.7-ckt25-13.16.7-ckt25-1~bpo70+13.16.7-ckt25-23.16.7-ckt25-2+deb8u13.16.7-ckt25-2+deb8u23.16.7-ckt25-2+deb8u33.16.7-ckt25-2+deb8u3~bpo70+13.16.7-ckt25-2~bpo70+13.16.7-ckt9-23.16.7-ckt9-33.16.7-ckt9-3~deb8u13.16.7-ckt9-3~deb8u1~bpo70+1
3.16.43-2+deb8u5
linux
Debian:9
From an advisory covering 16 CVEs
 before 4.9.30-2+deb9u5, plus listed versions
4.9.30-24.9.30-2+deb9u14.9.30-2+deb9u24.9.30-2+deb9u2~bpo8+14.9.30-2+deb9u34.9.30-2+deb9u44.9.30-2+deb9u5~bpo8+1
4.9.30-2+deb9u5
kernel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
Show 82 moreShow less
Affected packages
PackageAffectedFixed
kernel-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-bootwrapper
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-ppc64
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-kdump
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-kdump-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-kdump-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-abi-whitelists
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debug-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-i686
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
kernel-firmware
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
perf-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
python-perf
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.6.32-754.29.1.el6
0:2.6.32-754.29.1.el6
linux-lts-xenial
Ubuntu:14.04:LTS
 before 4.4.0-93.116~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 32 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.1
4.4.0-93.116~14.04.1
linux
Ubuntu:16.04:LTS
 before 4.4.0-93.116, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-93.116
linux-aws
Ubuntu:16.04:LTS
 before 4.4.0-1032.41, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 12 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.40
4.4.0-1032.41
linux-gcp
Ubuntu:16.04:LTS
 before 4.13.0-1002.5, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
4.13.0-1002.5
linux-gke
Ubuntu:16.04:LTS
 before 4.4.0-1028.28, plus listed versions
4.4.0-1003.34.4.0-1005.64.4.0-1006.64.4.0-1008.84.4.0-1009.9
Show 10 moreShow less
4.4.0-1010.104.4.0-1012.124.4.0-1013.134.4.0-1014.144.4.0-1016.164.4.0-1018.184.4.0-1022.224.4.0-1024.244.4.0-1026.264.4.0-1027.27
4.4.0-1028.28
linux-hwe
Ubuntu:16.04:LTS
 before 4.13.0-32.35~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 21 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.1
4.13.0-32.35~16.04.1
linux-raspi2
Ubuntu:16.04:LTS
 before 4.4.0-1071.79, plus listed versions
4.2.0-1013.194.2.0-1014.214.3.0-1006.64.4.0-1003.44.4.0-1004.5
Show 30 moreShow less
4.4.0-1009.104.4.0-1010.124.4.0-1010.134.4.0-1012.164.4.0-1016.224.4.0-1017.234.4.0-1019.254.4.0-1021.274.4.0-1023.294.4.0-1027.334.4.0-1029.364.4.0-1034.414.4.0-1038.454.4.0-1040.474.4.0-1042.494.4.0-1044.514.4.0-1046.534.4.0-1048.554.4.0-1050.574.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1055.624.4.0-1057.644.4.0-1059.674.4.0-1061.694.4.0-1065.734.4.0-1067.754.4.0-1069.774.4.0-1070.78
4.4.0-1071.79
linux-snapdragon
Ubuntu:16.04:LTS
 before 4.4.0-1073.78, plus listed versions
4.4.0-1012.124.4.0-1013.144.4.0-1013.154.4.0-1015.184.4.0-1019.22
Show 27 moreShow less
4.4.0-1020.234.4.0-1022.254.4.0-1024.274.4.0-1026.294.4.0-1030.334.4.0-1032.364.4.0-1035.394.4.0-1039.434.4.0-1042.464.4.0-1044.484.4.0-1046.504.4.0-1047.514.4.0-1048.524.4.0-1050.544.4.0-1051.554.4.0-1053.574.4.0-1054.584.4.0-1055.594.4.0-1057.614.4.0-1058.624.4.0-1059.634.4.0-1061.664.4.0-1063.684.4.0-1067.724.4.0-1069.744.4.0-1071.764.4.0-1072.77
4.4.0-1073.78
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLinux Kernel - 'offset2lib' Stack Clash2017-06-28
Exploit-DBLinux Kernel (Debian 9/10 / Ubuntu 14.04.5/16.04.2/17.04 / Fedora 23/24/25) - 'ldso_dynamic Stack Clash' Local Privilege Escalation2017-06-28
PoC in GitHubTrinadh465/linux-4.1.15_CVE-2017-10003712023-02-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-1000371 is a high vulnerability (CVSS 7.8) in Linux Kernel, published June 19, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in linux 4.11.11-1.

References

Show 16 moreShow less
This page doesn't list everything

Left out here: 10 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open