CVE.RADIO
FREN

CVE-2017-1000407

linux-ltsVulnerabilityPatched

No public exploitation has been reported so far. A fixed version is available (see the table below).

Recommended action: Update to the fixed version listed for your distribution using the native package manager.

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

DistributionPackageAffectedFixed versionStatus
Archlinux-lts4.9.68-14.9.69-1fixed
Archlinux-hardened4.14.5-14.14.6-1fixed
Archlinux-zen4.14.5-14.14.6-1fixed
Archlinux4.14.5-14.14.6-1fixed
Debian:11linux-4.14.7-1fixed
Debian:12linux-4.14.7-1fixed
Debian:13linux-4.14.7-1fixed
Debian:14linux-4.14.7-1fixed
SUSE:Linux Enterprise Server 11 SP4kernel-default-3.0.101-108.81.1fixed
SUSE:Linux Enterprise Server for SAP Applications 11 SP4kernel-default-3.0.101-108.81.1fixed
SUSE:Linux Enterprise Server for SAP Applications 12 SP1kernel-default-3.12.74-60.64.110.1fixed
SUSE:Linux Enterprise Server 12 SP1-LTSSkernel-default-3.12.74-60.64.110.1fixed
SUSE:Linux Enterprise Point of Sale 11 SP3kernel-default-3.0.101-0.47.106.59.1fixed
SUSE:Linux Enterprise Server 11 SP3-LTSSkernel-default-3.0.101-0.47.106.59.1fixed
Red Hat:enterprise_linux:7::clientkernel-0:3.10.0-862.el7fixed
Red Hat:enterprise_linux:7::computenodekernel-0:3.10.0-862.el7fixed
Red Hat:enterprise_linux:7::serverkernel-0:3.10.0-862.el7fixed
Red Hat:enterprise_linux:7::workstationkernel-0:3.10.0-862.el7fixed
Red Hat:rhel_eus:7.4::computenodekernel-0:3.10.0-693.47.2.el7fixed
Red Hat:rhel_eus:7.4::serverkernel-0:3.10.0-693.47.2.el7fixed

Sources