Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-12192
HistoryOct 12, 2017 - 12:29 a.m.

Code injection

2017-10-1200:29:00
PRIOn knowledge base
www.prio-n.com
10

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.