CVE-2017-12192: Null Pointer Dereference
A vulnerability in the Key Management sub component was found in the Linux kernel. Trying to KEYTCLREAD on negative key would lead to a NULL pointer dereference. A local attacker could use this flaw to crash the kernel.
References:
https://lkml.org/lkml/2017/9/18/764
http://seclists.org/oss-sec/2017/q4/63
An upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678
Other sources
The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTLREAD operation.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2017-12192.
What is the severity level of CVE-2017-12192?
CVE-2017-12192 has a medium severity level.
How does this vulnerability impact the Linux kernel versions?
This vulnerability affects Linux kernel versions before 4.13.5.
What is the impact of CVE-2017-12192?
CVE-2017-12192 allows local users to cause a denial of service (OOPS and system crash).
Is there a fix available for CVE-2017-12192?
Yes, the fix is available in Linux kernel version 4.13.5 and higher.