CVE-2017-6001: Linux Kernel

High severity, CVSS 7.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a crafted application that makes concurrent perf_event_open system calls for moving a software group into a hardware context. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6786.

Affected products

• Linux Linux Kernel: from 3.18.54, before 3.18.92 (fixed in 3.18.92); from 4.0, before 4.4.65 (fixed in 4.4.65); from 4.5, before 4.9.7 (fixed in 4.9.7)

Published 2017-02-18. Last modified 2026-06-17.