CVE-2017-12146: The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows loca...

Security readout for executives and security teams

CVE-2017-12146 is a Linux kernel local privilege escalation issue. An attacker already able to run code locally could abuse a race in platform driver override handling to gain higher privileges. The public bundle does not show remote exploitation or active exploitation. Exposure is most likely on Linux systems running kernels before 4.12.1 or vendor kernels without the backported fix. Downstream status should be checked against vendor advisories for Android, Debian, Red Hat, SUSE, and other maintained distributions. Treat as a high-priority patching item for shared or multi-tenant Linux environments. It is less urgent than an internet-facing remote exploit, but successful abuse could turn limited local access into privileged system control. Mitigation focus: Upgrade to Linux kernel 4.12.1 or a vendor kernel containing the upstream fix.; Apply relevant Android, Debian, Red Hat, SUSE, or distribution security updates.; Prioritize shared systems where untrusted users or workloads have local execution..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.