A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.
CVSS Details
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 5, 2017 | Sep 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | Sep 21, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 7, 2019 | Sep 13, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2017 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Oct 18, 2017 | Sep 21, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-gkeUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-98-genericUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenial | Oct 31, 2017 | Sep 21, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub