CVE-2017-15299 in Linux Kernel

Resumen (Inglés)

The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uninstantiated, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted system call.

Reservar

2017-10-14

Divulgación

2017-10-14

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
107862	Linux Kernel KEYS add_key denegación de servicio	476	No está definido	Arreglo oficial	CVE-2017-15299