The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Nov 18, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Nov 2, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 26, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azure | Dec 4, 2017 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-gkeUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-103-powerpc64-smpUpgrade linux-image-4.4.0-1012-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-103-powerpc-e500mcUpgrade linux-image-4.13.0-1002-gcpUpgrade linux-image-4.13.0-19-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1043-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.4.0-103-powerpc-smpUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1079-raspi2Upgrade linux-image-4.4.0-103-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-103-lowlatencyUpgrade linux-image-4.4.0-1005-awsUpgrade linux-image-4.4.0-103-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-103-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-19-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-1008-raspi2Upgrade linux-image-4.13.0-19-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.4.0-1081-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb | Dec 8, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub