CVE-2017-7472

Published: May 11, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.

Affected (1)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 4.10.12

Related CWEs

CWE-404

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (30)

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9f838d104fed6f2f61d68164712e3204bf5271b

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2017/05/11/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/98422

Source: secalert@redhat.com

http://www.securitytracker.com/id/1038471

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:0151

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:0152

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2018:0181

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=1034862

Source: secalert@redhat.com

Issue TrackingPatch

https://bugzilla.redhat.com/show_bug.cgi?id=1442086

Source: secalert@redhat.com

Issue TrackingPatch

https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://lkml.org/lkml/2017/4/1/235

Source: secalert@redhat.com

Broken Link

https://lkml.org/lkml/2017/4/3/724

Source: secalert@redhat.com

Broken Link

https://www.exploit-db.com/exploits/42136/

Source: secalert@redhat.com

https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.13

Source: secalert@redhat.com

Release NotesVendor Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c9f838d104fed6f2f61d68164712e3204bf5271b