CVE-2017-15951

High

Published: 28/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The KEYS subsystem in the Linux kernel before version 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the 'negative' state, leading to race conditions.

Risk Assessment

Local users can cause a denial of service or potentially trigger unspecified other impacts via crafted system calls.

Recommendation

It is recommended to update the Linux kernel to version 4.13.10 or later to mitigate this vulnerability.

Other vulnerabilities in Podsystem KEYS w jądrze Linux

CVE-2017-2647High
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

Original NVD description (English source)

The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS