CVE-2017-15299 in Linux Kernel
Summary
The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.
Reservation
10/14/2017
Disclosure
10/14/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 107862 | Linux Kernel KEYS add_key null pointer dereference | 476 | Not defined | Official fix | CVE-2017-15299 |