CVE - CVE-2017-12192

CVE-ID
CVE-2017-12192	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:RHSA-2018:0151 URL:https://access.redhat.com/errata/RHSA-2018:0151 MISC:USN-3583-1 URL:https://usn.ubuntu.com/3583-1/ MISC:USN-3583-2 URL:https://usn.ubuntu.com/3583-2/ MISC:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678 URL:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678 MISC:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5 URL:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1493435 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1493435 MISC:https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678 URL:https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678 MISC:https://lkml.org/lkml/2017/9/18/764 URL:https://lkml.org/lkml/2017/9/18/764
Assigning CNA
Red Hat, Inc.
Date Record Created
20170801	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20170801)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)