CVE-2017-12153: Null Pointer Dereference
A security flaw is present in nl80211setrekeydata() function in the Linux kernel since v3.1-rc1 through v4.13. This function does not check whether required attributes are present in a netlink request. This request can be issued by a user with CAPNETADMIN privilege and may result in NULL dereference and a system crash.
Vulnerability surface:
An analysis shows that NL80211CMDSETREKEYOFFLOAD request should be issued for a WiFi interface connected to a wireless network. This means that an attacker should be a privileged user already or should be root in a user+net namespace to which a WiFi interface was moved from a main net namespace. We believe the later configuration to be unlikely.
References:
http://seclists.org/oss-sec/2017/q3/437
https://marc.info/?t=150525503100001&r=1&w=2
Suggested upstream patch:
https://marc.info/?l=linux-wireless&m=150525493517953&w=2
Other sources
A security flaw was discovered in the nl80211setrekeydata() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAPNETADMIN capability and may result in a NULL pointer dereference and system crash.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12153?
CVE-2017-12153 has a severity rating that suggests it may lead to denial-of-service conditions due to a NULL dereference.
How do I fix CVE-2017-12153?
To fix CVE-2017-12153, update the Linux kernel to version 4.13.4 or later depending on your distribution's available package.
What systems are affected by CVE-2017-12153?
CVE-2017-12153 affects Linux kernel versions from 3.1-rc1 through 4.13.3 across various distributions.
Who can exploit CVE-2017-12153?
A user with CAP_NET_ADMIN privileges can exploit CVE-2017-12153.
What impact does CVE-2017-12153 have on system performance?
CVE-2017-12153 can cause system crashes or instability due to unexpected NULL pointer dereferencing.