vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-15537

N/A
Published: October 17, 2017 at 06:00 PM UTC
Updated: June 17, 2026 at 01:07 AM UTC
1 product affected across 1 vendorLinux Kernel

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.4%

Description

The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not correctly handle attempts to set reserved bits in the xstate header via the ptrace() or rt_sigreturn() system call, allowing local users to read the FPU registers of other processes on the system, related to arch/x86/kernel/fpu/regset.c and arch/x86/kernel/fpu/signal.c.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
v ≤ 4.13.4

References (4)

x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
Source: [email protected]
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=814fb7bb7db5433757d76f4c4502c96fc53b0b5e
x_refsource_CONFIRMRelease NotesVendor Advisory
Source: [email protected]
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://github.com/torvalds/linux/commit/814fb7bb7db5433757d76f4c4502c96fc53b0b5e
x_refsource_CONFIRM
Source: [email protected]
https://source.android.com/security/bulletin/pixel/2018-01-01

CVSS

2.1LOW[email protected]
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-200

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card