The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 21, 2017 | Nov 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Nov 18, 2017 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Dec 8, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade perf | Jan 19, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 27, 2018 | Nov 2, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 26, 2018 | Nov 18, 2017 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-man | Dec 4, 2017 | Nov 18, 2017 |
| Ubuntu | — | Upgrade linux-image-4.13.0-1008-raspi2Upgrade linux-image-4.4.0-103-lowlatencyUpgrade linux-image-4.4.0-1005-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-4.13.0-19-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-19-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1081-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-103-generic-lpaeUpgrade linux-image-4.4.0-103-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-153-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.13.0-1002-gcpUpgrade linux-image-4.4.0-1043-awsUpgrade linux-image-4.4.0-1079-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-153-powerpc-e500mcUpgrade linux-image-3.13.0-153-powerpc-smpUpgrade linux-image-3.13.0-153-generic-lpaeUpgrade linux-image-4.4.0-103-powerpc64-embUpgrade linux-image-3.13.0-153-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-19-generic-lpaeUpgrade linux-image-4.4.0-103-powerpc64-smpUpgrade linux-image-4.4.0-103-powerpc-e500mcUpgrade linux-image-4.4.0-1012-kvmUpgrade linux-image-3.13.0-153-powerpc-e500Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-153-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-103-powerpc-smpUpgrade linux-image-3.13.0-153-genericUpgrade linux-image-gcp | Dec 8, 2017 | Nov 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub