{"status":"success","advisory":{"_id":"6a105fd2c8730d7e15670d3f","kb_acknowledgements":null,"kb_affected_list":["Data ONTAP Edge","NetApp Cloud Backup (formerly AltaVault)","OnCommand Balance","SnapProtect"],"kb_bad_data":false,"kb_cve":["CVE-2017-1000253"],"kb_exploitation":"Public","kb_fixes":[{"product":"Data ONTAP Edge","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2630722.html"},{"product":"NetApp Cloud Backup (formerly AltaVault)","fixes":[{"link":"https://mysupport.netapp.com/NOW/download/software/altavault_virtualapp/4.4/","cves":[]},{"link":"https://mysupport.netapp.com/NOW/download/software/altavault_phyapp/4.4/","cves":[]},{"link":"https://mysupport.netapp.com/NOW/download/software/altavault_ava800/4.4/","cves":[]}],"instructions":"","wontfix":false,"eos_link":null},{"product":"OnCommand Balance","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMP1655122.html"},{"product":"SnapProtect","fixes":[],"instructions":null,"wontfix":true,"eos_link":"https://mysupport.netapp.com/info/communications/ECMLP2426797.html"}],"kb_impact":"Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).","kb_internal_notes":[{"burt":"","jira":"PSIRT-31887","product":"AFF Baseboard Management Controller (BMC) - A700s"},{"burt":"","jira":"PSIRT-31888","product":"AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70"},{"burt":"","jira":"PSIRT-31889","product":"AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50"},{"burt":"1115708","jira":"","product":"Active IQ Unified Manager for VMware vSphere"},{"burt":"","jira":"CONTAPEXT-3863","product":"Brocade Fabric Operating System Firmware"},{"burt":"","jira":"CONTAP-711029","product":"Cloud Volumes ONTAP Mediator"},{"burt":"1115693","jira":"","product":"Cluster Network Switch (NetApp CN1610)"},{"burt":"1115694","jira":"","product":"Data ONTAP Edge"},{"burt":"","jira":"","product":"E-Series SANtricity OS Controller Software"},{"burt":"","jira":"PSIRT-31892","product":"FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400"},{"burt":"","jira":"PSIRT-31893","product":"FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250"},{"burt":"","jira":"PSIRT-31894","product":"FAS/AFF Baseboard Management Controller (BMC) - A320"},{"burt":"","jira":"PSIRT-31895","product":"FAS/AFF Baseboard Management Controller (BMC) - A800/C800"},{"burt":"","jira":"PSIRT-31896","product":"FAS/AFF Baseboard Management Controller (BMC) - A900/9500"},{"burt":"1280378","jira":"","product":"FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750"},{"burt":"","jira":"PSIRT-31897","product":"FAS/AFF Baseboard Management Controller (BMC) - FAS2820"},{"burt":"1115711","jira":"","product":"FAS/AFF Service Processor - 8080/8060/8040/8020"},{"burt":"","jira":"PSIRT-31898","product":"FAS/AFF Service Processor - A300/8200"},{"burt":"","jira":"PSIRT-31899","product":"FAS/AFF Service Processor - A700/9000"},{"burt":"1115697","jira":"","product":"Management Network Switch (NetApp CN1601)"},{"burt":"1115698","jira":"","product":"NetApp Cloud Backup (formerly AltaVault)"},{"burt":"","jira":"PSIRT-31900","product":"NetApp Console Agent OVA"},{"burt":"","jira":"PSIRT-31902","product":"NetApp HCI Baseboard Management Controller (BMC) - H610S"},{"burt":"","jira":"PSIRT-31904","product":"NetApp SolidFire & HCI Management Node"},{"burt":"","jira":"","product":"NetApp SolidFire & HCI Storage Node (Element Software)"},{"burt":"1115706","jira":"","product":"NetApp VASA Provider for Clustered Data ONTAP 9.7 and above"},{"burt":"1115709","jira":"","product":"ONTAP Select Deploy administration utility"},{"burt":"","jira":"PSIRT-31906","product":"ONTAP tools for VMware vSphere 10"},{"burt":"1115699","jira":"","product":"OnCommand Balance"},{"burt":"1115700","jira":"","product":"OnCommand Performance Manager for VMware vSphere"},{"burt":"1115707","jira":"","product":"OnCommand Unified Manager for VMware vSphere for 7.1 and below"},{"burt":"","jira":"CXPLAT-2116","product":"SnapCenter Plug-in for VMware vSphere"},{"burt":"1115712","jira":"","product":"SnapProtect"},{"burt":"1115695","jira":"","product":"Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above"},{"burt":"1115714","jira":"","product":"StorageGRID (formerly StorageGRID Webscale)"},{"burt":"","jira":"PSIRT-31908","product":"StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000"},{"burt":"","jira":"PSIRT-31909","product":"StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100"},{"burt":"","jira":"PSIRT-31910","product":"StorageGRID Baseboard Management Controller (BMC) - SG6260/SGF6212/SG120/SG1200"},{"burt":"","jira":"PSIRT-31911","product":"StorageGRID Baseboard Management Controller - (BMC) SG5812/SG5860"},{"burt":"1115713","jira":"","product":"StorageGRID9 (9.x and prior)"},{"burt":"1115715","jira":"","product":"Virtual Storage Console for VMware vSphere 9.7 and above"}],"kb_investigating_list":["Brocade Fabric Operating System Firmware","NetApp Console Agent OVA","NetApp HCI Baseboard Management Controller (BMC) - H610S","NetApp SolidFire & HCI Management Node","SnapCenter Plug-in for VMware vSphere"],"kb_num":"9010000","kb_ref":["https://www.qualys.com/2017/09/26/cve-2017-1000253/cve-2017-1000253.txt"],"kb_rev_history":[{"comment":"Initial Public Release","date":"20260522","version":"1.0"},{"comment":"AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70, FAS/AFF Baseboard Management Controller (BMC) - FAS2820, AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50, FAS/AFF Baseboard Management Controller (BMC) - A320, FAS/AFF Baseboard Management Controller (BMC) - A800/C800, FAS/AFF Baseboard Management Controller (BMC) - A900/9500, FAS/AFF Service Processor - A300/8200 and FAS/AFF Service Processor - A700/9000 moved to Products Not Affected","date":"20260526","version":"2.0"},{"comment":"FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400 moved to Products Not Affected","date":"20260604","version":"3.0"},{"comment":"FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250 moved to Products Not Affected","date":"20260616","version":"4.0"}],"kb_revised_list":[],"kb_scoring":{"CVE-2017-1000253":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"kb_scoring_calc":[{"cve_id":"CVE-2017-1000253","range":"HIGH","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"kb_status":"Interim","kb_summary":"Multiple NetApp products incorporate Linux kernel. Certain versions of Linux kernel are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS).","kb_title":"CVE-2017-1000253 Linux Kernel Vulnerability in NetApp Products","kb_unaffected_list":["AFF Baseboard Management Controller (BMC) - A700s","AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70","AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50","Active IQ Config Advisor","Active IQ Unified Manager for Linux","Active IQ Unified Manager for Microsoft Windows","Active IQ Unified Manager for VMware vSphere","Cloud Volumes ONTAP Mediator","Cluster Network Switch (NetApp CN1610)","E-Series SANtricity OS Controller Software","E-Series SANtricity Unified Manager and Web Services Proxy","FAS/AFF BIOS - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - 8300/8700/A400/C400","FAS/AFF Baseboard Management Controller (BMC) - A250/500f/C250","FAS/AFF Baseboard Management Controller (BMC) - A320","FAS/AFF Baseboard Management Controller (BMC) - A800/C800","FAS/AFF Baseboard Management Controller (BMC) - A900/9500","FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750","FAS/AFF Baseboard Management Controller (BMC) - FAS2820","FAS/AFF Service Processor - 8080/8060/8040/8020","FAS/AFF Service Processor - A300/8200","FAS/AFF Service Processor - A700/9000","Management Network Switch (NetApp CN1601)","MetroCluster Tiebreaker","NetApp Console Agent","NetApp Manageability SDK","NetApp NFS Plug-in for VMware VAAI","NetApp ONTAP PowerShell Toolkit (PSTK)","NetApp SMI-S Provider","NetApp SolidFire & HCI Storage Node (Element Software)","NetApp VASA Provider for Clustered Data ONTAP 9.7 and above","ONTAP 9","ONTAP Antivirus Connector","ONTAP Select Deploy administration utility","ONTAP tools for VMware vSphere 10","OnCommand Insight","OnCommand Performance Manager for VMware vSphere","OnCommand Unified Manager for VMware vSphere for 7.1 and below","SAN Host Utilities for Linux","SAN Host Utilities for Windows","SnapCenter","Storage Replication Adapter for Clustered Data ONTAP for VMware vSphere 9.7 and above","StorageGRID (formerly StorageGRID Webscale)","StorageGRID Baseboard Management Controller (BMC) - SG6060/SGF6024/SG100/SG1000","StorageGRID Baseboard Management Controller (BMC) - SG6160/SGF6112/SG110/SG1100","StorageGRID Baseboard Management Controller (BMC) - SG6260/SGF6212/SG120/SG1200","StorageGRID Baseboard Management Controller - (BMC) SG5812/SG5860","StorageGRID9 (9.x and prior)","System Manager 9.x","Virtual Storage Console for VMware vSphere 9.7 and above"],"kb_workarounds":"None at this time.","ntap_advisory_id":"NTAP-20260522-0015","adv_id":"ntap-20260522-0015","published_date":"2026-05-22T00:00:00","updated_date":"2026-06-16T00:00:00","inserted_date":"2026-06-16T09:49:11.214000","modified_date":null}}