CVE-2017-12193 in Linux Kernel
Summary
The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.
Reservation
08/01/2017
Disclosure
11/22/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 109798 | Linux Kernel assoc_array.c assoc_array_insert_into_terminal_node null pointer dereference | 476 | Not defined | Official fix | CVE-2017-12193 |