ACTIVELY EXPLOITED

CVE-2017-1000253: Linux Kernel PIE Stack Buffer Corruption Vulnerability

Facts
VendorLinux
ProductKernel
Actively exploitedYes
Added to CISA KEV9 Sep 2024
CISA federal deadline30 Sep 2024
Ransomware useKnown
Weakness (CWE)CWE-119

Required action (CISA's text)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description (NVD)

Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges.

SOURCES

Other Linux flaws

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.