CVE-2017-8065

Published: Apr 23, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a DMA scatterlist.

Affected (32)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 4.10.10
Linux Linux Kernel	Version 4.10.11
Linux Linux Kernel	Version 4.10.12
Linux Linux Kernel	Version 4.10.1
Linux Linux Kernel	Version 4.10.2
Linux Linux Kernel	Version 4.10.3
Linux Linux Kernel	Version 4.10.4
Linux Linux Kernel	Version 4.10.5
Linux Linux Kernel	Version 4.10.6
Linux Linux Kernel	Version 4.10.7
Linux Linux Kernel	Version 4.10.8
Linux Linux Kernel	Version 4.10.9
Linux Linux Kernel	Version 4.10
Linux Linux Kernel	Version 4.9.10
Linux Linux Kernel	Version 4.9.11
Linux Linux Kernel	Version 4.9.12
Linux Linux Kernel	Version 4.9.13
Linux Linux Kernel	Version 4.9.14
Linux Linux Kernel	Version 4.9.15
Linux Linux Kernel	Version 4.9.16
Linux Linux Kernel	Version 4.9.17
Linux Linux Kernel	Version 4.9.18
Linux Linux Kernel	Version 4.9.19
Linux Linux Kernel	Version 4.9.1
Linux Linux Kernel	Version 4.9.2
Linux Linux Kernel	Version 4.9.3
Linux Linux Kernel	Version 4.9.4
Linux Linux Kernel	Version 4.9.5
Linux Linux Kernel	Version 4.9.6
Linux Linux Kernel	Version 4.9.8
Linux Linux Kernel	Version 4.9.9
Linux Linux Kernel	Version 4.9