CVE-2017-12192

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678Patch, Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0151
https://bugzilla.redhat.com/show_bug.cgi?id=1493435Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678Patch, Vendor Advisory
https://lkml.org/lkml/2017/9/18/764Mailing List, Third Party Advisory
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=37863c43b2c6464f252862bf2e9768264e961678Patch, Vendor Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:0151
https://bugzilla.redhat.com/show_bug.cgi?id=1493435Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/37863c43b2c6464f252862bf2e9768264e961678Patch, Vendor Advisory
https://lkml.org/lkml/2017/9/18/764Mailing List, Third Party Advisory
https://usn.ubuntu.com/3583-1/
https://usn.ubuntu.com/3583-2/

Timeline

Published: Oct 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-121935.5The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which CVE-2017-121949.8A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-ser CVE-2017-121954.8A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name CVE-2017-121965.9undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not en CVE-2017-121976.5It was found that libpam4j up to and including 1.8 did not properly validate user accounts when authenticating. A user with a valid password CVE-2017-121999.8The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue CVE-2017-12205.3IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The information can be CVE-2017-122006.1The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component.CVE-2017-12219.8IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it eas CVE-2017-122115.3A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could allow an authenticat CVE-2017-122126.1A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-CVE-2017-122134.3A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches cou