CVE-2017-7533: Linux Kernel

High severity, CVSS 7.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_rename functions.

Affected products

• Linux Linux Kernel: from 3.14, before 3.16.47 (fixed in 3.16.47); from 3.17, before 3.18.64 (fixed in 3.18.64); from 3.19, before 4.4.80 (fixed in 4.4.80); from 4.5, before 4.9.41 (fixed in 4.9.41); from 4.10, before 4.12.5 (fixed in 4.12.5)

Published 2017-08-05. Last modified 2026-06-17.