NetSight
IP …
high7.8

CVE-2017-18075

crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_C…

Impact

crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 4.4.111
from 4.5 before 4.9.76
from 4.10 before 4.14.13
CanonicalUbuntu Linux
Versions 14.04, 16.04

Weakness classification

CWE-763

References