The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Oct 11, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Oct 11, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Nov 30, 2017 | Oct 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Dec 4, 2017 | Oct 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 14, 2017 | Sep 18, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 26, 2018 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-17-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-kvmUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.13.0-17-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.13.0-1006-raspi2Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-17-lowlatencyUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.4.0-1039-aws | Oct 31, 2017 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub