CVE-2017-12153CWE-476

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3

published September 21, 2017

CVSS
—
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2017-09-21T15:00Z
EPSS history
Timeline
  • 21 SEP 15:00Z
    A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3
    cvelistv5