CVE-2017-12192

Published: 11 October 2017

The keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service (OOPS and system crash) via a crafted KEYCTL_READ operation.

From the Ubuntu security team

It was discovered that the key management subsystem in the Linux kernel did not properly restrict key reads on negatively instantiated keys. A local attacker could use this to cause a denial of service (system crash).

Priority

CVSS 3 base score: 5.5

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







	Patches: Introduced by 61ea0c0ba904a55f55317d850c1072ff7835ac92 Fixed by 37863c43b2c6464f252862bf2e9768264e961678
linux-armadaxp Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







	This package is not directly supported by the Ubuntu Security Team
linux-aws Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-azure Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-euclid Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-flo Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-gcp Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-gke Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-goldfish Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-grouper Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-hwe Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-hwe-edge Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-kvm Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-linaro-omap Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-linaro-shared Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-linaro-vexpress Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-quantal Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







	This package is not directly supported by the Ubuntu Security Team
linux-lts-raring Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-saucy Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







	This package is not directly supported by the Ubuntu Security Team
linux-lts-trusty Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-utopic Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-vivid Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-wily Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-lts-xenial Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-maguro Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-mako Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-manta Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-oem Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-qcm-msm Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-raspi2 Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-snapdragon Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)







linux-ti-omap4 Launchpad, Ubuntu, Debian	Upstream	Released (4.14~rc3)

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›