CVE-2017-9211 | BDVDB-2026-85885 Detail

Description#

The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-05-23Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.