NULL pointer dereference in Linux kernel - CVE-2017-12153

Vulnerability identifier: #VU8694

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-12153

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

Linux kernel
SUSE Linux
Ubuntu
Fedora
kernel

Install the latest version of Linux kernel 4.4.90, 4.13.5 or 4.9.53.

kernel - addressed in versions 4.12.13-200.fc25, 4.12.13-300.fc26

• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.90
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
• https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.53

• Ubuntu update for Linux kernel
• Ubuntu update for Linux kernel (Trusty HWE)
• OpenSUSE Linux update for the Linux Kernel
• OpenSUSE Linux update for the Linux Kernel
• SUSE Linux update for the Linux Kernel
• SUSE Linux update for the Linux Kernel
• Ubuntu update for Linux kernel
• Fedora 26 update for kernel
• Fedora 25 update for kernel