CVE-2017-7374

Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
VendorProductVersion
linuxlinux_kernel
4.2 ≤
𝑥
< 4.4.59
linuxlinux_kernel
4.5 ≤
𝑥
< 4.9.20
linuxlinux_kernel
4.10 ≤
𝑥
< 4.10.7
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
jessie
not-affected
wheezy
not-affected
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
Fixed 4.8.0-58.63
released
xenial
Fixed 4.4.0-75.96
released
trusty
not-affected
precise
not-affected
linux-armadaxp
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
not-affected
linux-aws
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
artful
dne
zesty
dne
yakkety
dne
xenial
Fixed 4.4.0-1016.25
released
trusty
not-affected
precise
dne
linux-aws-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-aws-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-aws-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-aws-hwe
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
ignored
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
not-affected
linux-azure-4.15
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-azure-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-azure-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-azure-fde
noble
dne
jammy
not-affected
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-azure-fde-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-azure-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-bluefield
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-euclid
bionic
dne
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-flo
bionic
dne
artful
dne
zesty
dne
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
linux-gcp
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
ignored
artful
dne
zesty
dne
yakkety
dne
xenial
not-affected
trusty
dne
linux-gcp-4.15
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gcp-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-gcp-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gcp-fips
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
ignored
trusty
dne
linux-gke
noble
not-affected
jammy
not-affected
focal
ignored
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
Fixed 4.4.0-1012.12
released
trusty
dne
precise
dne
linux-gkeop
noble
dne
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-gkeop-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-goldfish
bionic
dne
artful
dne
zesty
not-affected
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
linux-grouper
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-hwe
noble
dne
jammy
dne
focal
dne
bionic
ignored
artful
dne
zesty
dne
yakkety
dne
xenial
Fixed 4.10.0-32.36~16.04.1
released
trusty
dne
precise
dne
linux-hwe-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-hwe-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-hwe-edge
noble
dne
jammy
dne
focal
dne
bionic
ignored
artful
dne
zesty
dne
yakkety
dne
xenial
Fixed 4.8.0-58.63~16.04.1
released
trusty
dne
precise
dne
linux-ibm
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-ibm-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-intel
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iot-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-intel-iotg-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-iot
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-kvm
noble
dne
jammy
not-affected
focal
not-affected
bionic
not-affected
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-linaro-omap
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-linaro-shared
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-linaro-vexpress
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lowlatency
noble
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-lowlatency-hwe-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-lts-quantal
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-raring
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-saucy
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-lts-trusty
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
not-affected
linux-lts-utopic
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-lts-vivid
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-lts-wily
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-lts-xenial
noble
dne
jammy
dne
focal
dne
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
Fixed 4.4.0-75.96~14.04.1
released
precise
dne
linux-maguro
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-mako
bionic
dne
artful
dne
zesty
dne
yakkety
not-affected
xenial
not-affected
trusty
dne
precise
dne
linux-manta
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
dne
linux-nvidia
noble
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.5
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-nvidia-lowlatency
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oem
noble
dne
jammy
dne
focal
dne
bionic
ignored
artful
dne
zesty
dne
xenial
not-affected
trusty
dne
linux-oem-6.8
noble
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-oracle
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-oracle-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-oracle-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-qcm-msm
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
ignored
linux-raspi
noble
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-raspi-5.4
noble
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-raspi-realtime
noble
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-raspi2
noble
dne
jammy
dne
focal
ignored
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
Fixed 4.8.0-1042.46
released
xenial
Fixed 4.4.0-1054.61
released
trusty
dne
precise
dne
linux-realtime
noble
dne
jammy
ignored
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-riscv
noble
not-affected
jammy
ignored
focal
ignored
bionic
dne
xenial
dne
trusty
dne
linux-riscv-5.15
noble
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
linux-riscv-6.8
noble
dne
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
linux-snapdragon
noble
dne
jammy
dne
focal
dne
bionic
not-affected
artful
not-affected
zesty
Fixed 4.4.0-1057.61
released
yakkety
Fixed 4.4.0-1057.61
released
xenial
Fixed 4.4.0-1057.61
released
trusty
dne
precise
dne
linux-ti-omap4
bionic
dne
artful
dne
zesty
dne
yakkety
dne
xenial
dne
trusty
dne
precise
not-affected
linux-xilinx-zynqmp
noble
dne
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
Common Weakness Enumeration
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1b53cf9815bb4744958d41f3795d5d5a1d365e2d
http://www.securityfocus.com/bid/97308
https://github.com/torvalds/linux/commit/1b53cf9815bb4744958d41f3795d5d5a1d365e2d
https://source.android.com/security/bulletin/2017-10-01
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1b53cf9815bb4744958d41f3795d5d5a1d365e2d
http://www.securityfocus.com/bid/97308
https://github.com/torvalds/linux/commit/1b53cf9815bb4744958d41f3795d5d5a1d365e2d
https://source.android.com/security/bulletin/2017-10-01
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.10.7