A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that…

published 2017-12-06 8 y ago modified 2026-06-17 4 mo ago also EUVD-2017-6582

cvss: 5.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.4%; EPSS 0.4% chance of exploitation in 30 days, percentile 34%
public exploits: 0; none known

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.

Patch / fix

distros 2

debian red hat

linux Debian 14, Debian 13, Debian 12 3.11.5-1

debian advisories DEBIAN-CVE-2017-15121

kernel RHEL 6 2.6.32-754.el6
perf RHEL 6 2.6.32-754.el6
python-perf RHEL 6 2.6.32-754.el6
kernel-kdump RHEL 6 2.6.32-754.el6
kernel-firmware RHEL 6 2.6.32-754.el6
kernel-bootwrapper RHEL 6 2.6.32-754.el6
kernel-abi-whitelists RHEL 6 2.6.32-754.el6
kernel-debuginfo-common-i686 RHEL 6 2.6.32-754.el6

red hat advisories RHSA-2018:1854 RHSA-2018:1062 RHSA-2018:0676

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-15121 updated 2026-11-07 cvss 5.5

kernel: vfs: BUG in truncate_inode_pages_range() and fuse client

Red Hat Enterprise MRG 2 kernel-rt, mrg-rt-release, kernel-rt-trace, kernel-rt-vanilla, kernel-rt-firmware
affected: no fix available
Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-862.el7, kernel 3.10.0-862.el7, python-perf 3.10.0-862.el7, kernel-tools 3.10.0-862.el7, kernel-tools-libs 3.10.0-862.el7, kernel-abi-whitelists 3.10.0-862.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-862.el7, kernel 3.10.0-862.el7, python-perf 3.10.0-862.el7, kernel-tools 3.10.0-862.el7, kernel-tools-libs 3.10.0-862.el7, kernel-abi-whitelists 3.10.0-862.el7, +1 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.el7
fixed: vendor fix RHSA-2018:1062
Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-754.el6, kernel 2.6.32-754.el6, kernel-firmware 2.6.32-754.el6, kernel-abi-whitelists 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6
fixed: vendor fix RHSA-2018:1854
Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt 3.10.0-862.rt56.804.el7, kernel-rt-trace 3.10.0-862.rt56.804.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-862.rt56.804.el7 Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-862.rt56.804.el7, kernel-rt-kvm 3.10.0-862.rt56.804.el7, kernel-rt-trace 3.10.0-862.rt56.804.el7, kernel-rt-debug-kvm 3.10.0-862.rt56.804.el7, kernel-rt-trace-kvm 3.10.0-862.rt56.804.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-862.rt56.804.el7
fixed: vendor fix RHSA-2018:0676
Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-754.el6, kernel 2.6.32-754.el6, kernel-firmware 2.6.32-754.el6, kernel-abi-whitelists 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6 Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6 Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-754.el6, kernel 2.6.32-754.el6, kernel-kdump 2.6.32-754.el6, kernel-firmware 2.6.32-754.el6, kernel-bootwrapper 2.6.32-754.el6, kernel-abi-whitelists 2.6.32-754.el6, +4 more
fixed: vendor fix RHSA-2018:1854
Red Hat Enterprise Linux Server (v. 7) perf 3.10.0-862.el7, kernel 3.10.0-862.el7, python-perf 3.10.0-862.el7, kernel-kdump 3.10.0-862.el7, kernel-tools 3.10.0-862.el7, kernel-tools-libs 3.10.0-862.el7, +6 more
fixed: vendor fix RHSA-2018:1062
Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-ppc64 2.6.32-754.el6, kernel-debuginfo-common-s390x 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6
fixed: vendor fix RHSA-2018:1854
Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-ppc64 3.10.0-862.el7, kernel-debuginfo-common-x86_64 3.10.0-862.el7, kernel-debuginfo-common-ppc64le 3.10.0-862.el7
fixed: vendor fix RHSA-2018:1062

show 5 more

Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-754.el6, kernel 2.6.32-754.el6, kernel-firmware 2.6.32-754.el6, kernel-abi-whitelists 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6
fixed: vendor fix RHSA-2018:1854
Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-862.el7, kernel 3.10.0-862.el7, python-perf 3.10.0-862.el7, kernel-tools 3.10.0-862.el7, kernel-tools-libs 3.10.0-862.el7, kernel-abi-whitelists 3.10.0-862.el7, +1 more
fixed: vendor fix RHSA-2018:1062
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf 2.6.32-754.el6, kernel-debuginfo-common-i686 2.6.32-754.el6, kernel-debuginfo-common-x86_64 2.6.32-754.el6
fixed: vendor fix RHSA-2018:1854
Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-862.el7
fixed: vendor fix RHSA-2018:1062
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 7 perf, kernel, kernel-alt, python-perf, kernel-kdump, kernel-tools, +3 more
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.40% chance of exploitation in the next 30 days, higher than 34% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	3.0	5.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	4.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected products

Red Hat, Inc. Red Hat Enterprise Linux

Classification

Weakness

CWE-20 Improper Input Validation

References

access.redhat.com /errata/RHSA-2018:1854
vendor-advisory
access.redhat.com /errata/RHSA-2018:1062
vendor-advisory
access.redhat.com /errata/RHSA-2018:0676
vendor-advisory
bugzilla.redhat.com /show_bug.cgi?id=1520893
issue-tracking, vendor-advisory
securityfocus.com /bid/102128
vdb-entry, third-party-advisory
support.f5.com /csp/article/K42142782?utm_source=f5support&amp%3Butm_medium=RSS

Sources

CVE List CVE-2017-15121
NVD CVE-2017-15121

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary