CVE-2017-12193

2017-11-2218:00:00

CWE-476

redhat

www.cve.org

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.

CNA Affected

[
  {
    "product": "Linux kernel since 3.13 up to 4.14 (not including)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Linux kernel since 3.13 up to 4.14 (not including)"
      }
    ]
  }
]