The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2018 | Nov 18, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-devel | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Nov 2, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 26, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-default-man | Dec 4, 2017 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-103-powerpc-smpUpgrade linux-image-4.4.0-103-powerpc64-smpUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-4.4.0-1012-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-103-powerpc64-embUpgrade linux-image-4.4.0-1043-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-103-powerpc-e500mcUpgrade linux-image-4.4.0-1079-raspi2Upgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-4.13.0-1002-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-4.13.0-19-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-103-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-19-genericUpgrade linux-image-4.4.0-103-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1081-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.13.0-19-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-4.4.0-103-lowlatencyUpgrade linux-image-4.4.0-1005-awsUpgrade linux-image-4.13.0-1008-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic | Dec 8, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub