CVE-2017-1000253

HIGH

7.8

CVSS Score

Published: October 4, 2017 at 01:00 AM UTC

Updated: June 17, 2026 at 12:58 AM UTC

3 products affected across 3 vendorsLinux KernelEnterprise LinuxCentos

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploitation

CISA KEV

Exploit prediction

EPSS 11%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score10.7%

EPSS (Exploit Prediction Scoring System) estimates a 10.7% chance this CVE is exploited in the wild within the next 30 days — higher than 96% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges.

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Ransomware Use

Known

Added to KEV

Sep 9, 2024

Remediation Due

Sep 30, 2024

756 days overdue

Notes

This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a87938b2e246b81b4fb713edb371a9fa3c5c3c86

https://nvd.nist.gov/vuln/detail/CVE-2017-1000253

Description

Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the "gap" between the stack and the binary.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Centos · Centos

95%

6.0 6.1 6.2 6.3 6.4 6.5 6.6 6.7 6.8 6.9 7.1406 7.1503 7.1511 7.1611

Linux Kernel · Linux

95%

1.0 ≤ v < 4.0.22.6.25 ≤ v < 3.2.703.11 ≤ v < 3.12.433.13 ≤ v < 3.14.413.15 ≤ v < 3.16.353.17 ≤ v < 3.18.143.19 ≤ v < 3.19.73.3 ≤ v < 3.4.1093.5 ≤ v < 3.10.774.0 ≤ v < 4.0.21.0 2.6.25 3.11 3.13 3.15 3.17 3.19 3.3 3.5

Affected range stops below 3.10.77, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.12.43, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.14.41, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.18.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.19.7, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.2.70, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.4.109, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.0.2, so it looks safe — our inference, not a vendor statement

Enterprise Linux · Red Hatrpm

95%

6.0 6.1 6.2 6.3 6.4 6.5 6.6 6.7 6.8 6.9 7.0 7.1 7.2 7.3

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (14)

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/101010

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1039434