CVE-2017-12193CWE-476

The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users…

published November 22, 2017

CVSS
—
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyring key type, and key addition and link creation operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2017-11-22T18:00Z
EPSS history
Timeline
  • 22 NOV 18:00Z
    The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users…
    cvelistv5