The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Oct 11, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Oct 11, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perf | Nov 30, 2017 | Oct 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Dec 4, 2017 | Oct 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 14, 2017 | Sep 18, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 26, 2018 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenial | Oct 31, 2017 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub