The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Jan 27, 2018 | Nov 18, 2017 |
| Debian | debian-upgrade-linux | Jul 30, 2024 | Nov 22, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-kernelhuawei-euleros-2_0_sp1-upgrade-kernel-debughuawei-euleros-2_0_sp1-upgrade-kernel-debuginfohuawei-euleros-2_0_sp1-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp1-upgrade-kernel-develhuawei-euleros-2_0_sp1-upgrade-kernel-headershuawei-euleros-2_0_sp1-upgrade-kernel-toolshuawei-euleros-2_0_sp1-upgrade-kernel-tools-libshuawei-euleros-2_0_sp1-upgrade-perfhuawei-euleros-2_0_sp1-upgrade-python-perf | Dec 8, 2017 | Nov 22, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Jan 19, 2018 | Nov 22, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Jan 27, 2018 | Nov 2, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Jan 26, 2018 | Nov 18, 2017 | |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | Dec 4, 2017 | Nov 18, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-153-genericubuntu-upgrade-linux-image-3-13-0-153-generic-lpaeubuntu-upgrade-linux-image-3-13-0-153-lowlatencyubuntu-upgrade-linux-image-3-13-0-153-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-153-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-153-powerpc-smpubuntu-upgrade-linux-image-3-13-0-153-powerpc64-embubuntu-upgrade-linux-image-3-13-0-153-powerpc64-smpubuntu-upgrade-linux-image-4-13-0-1002-gcpubuntu-upgrade-linux-image-4-13-0-1008-raspi2ubuntu-upgrade-linux-image-4-13-0-19-genericubuntu-upgrade-linux-image-4-13-0-19-generic-lpaeubuntu-upgrade-linux-image-4-13-0-19-lowlatencyubuntu-upgrade-linux-image-4-4-0-1005-awsubuntu-upgrade-linux-image-4-4-0-1012-kvmubuntu-upgrade-linux-image-4-4-0-103-genericubuntu-upgrade-linux-image-4-4-0-103-generic-lpaeubuntu-upgrade-linux-image-4-4-0-103-lowlatencyubuntu-upgrade-linux-image-4-4-0-103-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-103-powerpc-smpubuntu-upgrade-linux-image-4-4-0-103-powerpc64-embubuntu-upgrade-linux-image-4-4-0-103-powerpc64-smpubuntu-upgrade-linux-image-4-4-0-1043-awsubuntu-upgrade-linux-image-4-4-0-1079-raspi2ubuntu-upgrade-linux-image-4-4-0-1081-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | Dec 8, 2017 | Nov 18, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub