security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Oct 27, 2017 | Oct 11, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 12, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debug | Nov 30, 2017 | Oct 11, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 18, 2018 | Oct 11, 2017 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2 | Oct 19, 2017 | Oct 11, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-generic-lpae | Feb 24, 2018 | Oct 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub