CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users…

published August 24, 2017

CVSS
—
EPSS
0%
Percentile
28.3
In the wild
Unconfirmed
What it is

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.3th percentile
Published
2017-08-24T22:00Z
EPSS history
Timeline
  • 24 AUG 22:00Z
    net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users…
    cvelistv5