CVE-2017-7374

Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or…

published March 31, 2017

CVSS
—
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00799 · 55.8th percentile
Published
2017-03-31T20:00Z
EPSS history
Timeline
  • 31 MAR 20:00Z
    Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or…
    cvelistv5