CVE-2017-17741: Medium severity Linux Linux kernel vulnerability
Published Dec 18, 2017
·Updated
Last updated 4 July 2026
Other sources
The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information from kernel memory, aka a writemmio stack-based out-of-bounds read, related to arch/x86/kvm/x86.c and include/trace/events/kvm.h.
— Launchpad
Affected Software
3 affected componentsFixes available
Linux Linux kernel<=4.14.7
Debian Debian Linux=9.0
debian/linux
5.10.223-15.10.262-16.1.176-16.1.180-16.12.94-16.12.101-17.1.8-17.1.8-2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
Linux kernel KVM (arch/x86/kvm/x86.c, include/trace/events/kvm.h)to a version that resolves this vulnerability.Fixed in 4.14.7
Event History
Dec 18, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·10:34 PM
Description
Jul 4, 2026
Data Sourced
via Ubuntu·11:10 AM
RemedyDescriptionSeverityAffected Software
Aug 16, 2026
Data Sourced
via Debian·12:43 PM
DescriptionAffected Software