The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2018 | Nov 18, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Nov 2, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 26, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azure | Dec 4, 2017 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-103-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.13.0-1008-raspi2Upgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.13.0-19-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-103-generic-lpaeUpgrade linux-image-4.4.0-1081-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-103-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-19-lowlatencyUpgrade linux-image-4.4.0-1005-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.4.0-1043-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1012-kvmUpgrade linux-image-4.4.0-103-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-1002-gcpUpgrade linux-image-4.4.0-103-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1079-raspi2Upgrade linux-image-4.4.0-103-powerpc-e500mcUpgrade linux-image-4.4.0-103-powerpc64-smpUpgrade linux-image-4.13.0-19-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-kvmUpgrade linux-image-snapdragon | Dec 8, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub