CVE-2017-2647

High

Published: 31/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

Risk Assessment

The organization may be exposed to unauthorized access or system crashes caused by NULL pointer dereference.

Recommendation

It is recommended to update the Linux kernel to version 3.18 or later to mitigate this vulnerability.

Other vulnerabilities in Podsystem KEYS w jądrze Linux

CVE-2017-15951High
The KEYS subsystem in the Linux kernel before version 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the 'negative' state, leading to race conditions.

Original NVD description (English source)

The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving a NULL value for a certain match field, related to the keyring_search_iterator function in keyring.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS