crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer dereference and system crash) by using an AF_ALG socket with an incompatible algorithm, as demonstrated by mcryptd(md5).
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 23, 2017 | Jan 4, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jan 18, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 18, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 4, 2017 | Dec 2, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Jan 18, 2017 |
| Suse | — | Upgrade kernel-default | Feb 14, 2017 | Jan 18, 2017 |
| Ubuntu | — | Upgrade linux-image-4.8.0-37-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-62-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-62-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1046-snapdragonUpgrade linux-image-4.4.0-62-genericUpgrade linux-image-4.4.0-62-powerpc64-embUpgrade linux-image-4.4.0-62-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.8.0-37-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1042-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-62-powerpc-e500mcUpgrade linux-image-4.8.0-1024-raspi2Upgrade linux-image-4.8.0-37-powerpc64-embUpgrade linux-image-4.4.0-62-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.8.0-37-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-37-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.8.0-37-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenial | Feb 4, 2017 | Jan 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub