net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 5, 2018 | Jul 24, 2017 |
| Debian | — | Upgrade linux | Sep 25, 2017 | Jul 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Nov 30, 2017 | Jul 24, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 28, 2018 | Jul 11, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 27, 2018 | Jul 24, 2017 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azure | Dec 20, 2017 | Jul 24, 2017 |
| Ubuntu | — | Upgrade linux-hwe-edgeUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-hweUpgrade linux-azure | Nov 19, 2024 | Jul 24, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub