net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 5, 2018 | Jul 24, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Jul 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Nov 30, 2017 | Jul 24, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 28, 2018 | Jul 11, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 27, 2018 | Jul 24, 2017 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 20, 2017 | Jul 24, 2017 |
| Ubuntu | — | Upgrade linux-hwe-edgeUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-azureUpgrade linux-hwe | Nov 19, 2024 | Jul 24, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub