CVE-2017-13686

Published
View on NVD ↗
CVSS v3
N/A
CVSS v2
7.2
HIGH
Affected
1
PROJECT

Description

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.

Linux kernel source tree
GitHubGitHub
237K