security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Oct 11, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 12, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | Nov 30, 2017 | Oct 11, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 18, 2018 | Oct 11, 2017 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-default | Oct 19, 2017 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trusty | Feb 24, 2018 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub