NetSight
high7.5

CVE-2017-7618

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion…

Impact

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.15 before 3.16.44
from 3.17 before 3.18.50
from 3.19 before 4.1.40
from 4.2 before 4.4.63
from 4.5 before 4.9.24
from 4.10 before 4.10.12

Weakness classification

References