CoreCVE
Back

MEDIUM

kernel: dereferencing NULL payload with nonzero length

Published Oct 12, 2017

Description

security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.

Affected products

Remediation

Red Hat statement

This issue affects the Linux kernel packages as shipped with Red Hat Enterprise Linux 5,6,7, MRG-2 and realtime kernels. Red Hat Enterprise Linux 5 has transitioned to Production phase 3. During the Production 3 Phase, Critical impact Security Advisories (RHSAs) and selected Urgent Priority Bug Fix Advisories (RHBAs) may be released as they become available. At this time this bug is not meet this critera and is unlikley to be fixed for these releases. The official life cycle policy can be reviewed here: http://redhat.com/rhel/lifecycle Future Linux kernel updates for the products in production phase 1 and 2, namely Red Hat Enterprise Linux 6, 7 and MRG-2 may address this issue.

Metrics

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (13)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 12, 2017
Updated Aug 5, 2024
Reserved Oct 11, 2017
Link CVE-2017-15274
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-15274
Red Hat
Severity Moderate
Public date Jun 8, 2017
Links CVE-2017-15274 - Bugzilla