The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Oct 11, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Oct 11, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo | Nov 30, 2017 | Oct 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debug | Dec 4, 2017 | Oct 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 14, 2017 | Sep 18, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 26, 2018 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency | Oct 31, 2017 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub