Veracode Vulnerability DatabaseVERACODE:18887Denial Of Service (DoS)
0.0004 Low
EPSS
Percentile
5.1%
Linux kernel is vulnerable to NULL pointer dereference vulnerability. This occurs in the Key Management sub component in Linux kernel when trying to issue a KEYTCL_READ on a negative key. Local attackers could cause a denial of service conditions via a crafted KEYCTL_READ operation.
References
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678
seclists.org/oss-sec/2017/q4/63
www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
access.redhat.com/articles/3327131
access.redhat.com/errata/RHSA-2018:0151
access.redhat.com/errata/RHSA-2018:0152
access.redhat.com/errata/RHSA-2018:0181
access.redhat.com/errata/RHSA-2018:0654
access.redhat.com/errata/RHSA-2020:2430
access.redhat.com/security/cve/CVE-2015-8539
access.redhat.com/security/cve/CVE-2017-12192
access.redhat.com/security/cve/CVE-2017-12193
access.redhat.com/security/cve/CVE-2017-15649
access.redhat.com/security/cve/CVE-2017-5715
access.redhat.com/security/cve/CVE-2017-5753
access.redhat.com/security/cve/CVE-2017-5754
access.redhat.com/security/cve/CVE-2017-7472
access.redhat.com/security/updates/classification/#important
access.redhat.com/security/vulnerabilities/speculativeexecution
bugzilla.redhat.com/show_bug.cgi?id=1493435
bugzilla.redhat.com/show_bug.cgi?id=1519778
bugzilla.redhat.com/show_bug.cgi?id=1519780
bugzilla.redhat.com/show_bug.cgi?id=1519781
github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678
lkml.org/lkml/2017/9/18/764
usn.ubuntu.com/3583-1/
usn.ubuntu.com/3583-2/
Related
