imPC@ndo IT

Tracker / CVE-2017-7618

CVE-2017-7618

High 7.5

crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.

Affected products and versions

linux linux_kernel · 3.15 → 3.16.44
linux linux_kernel · 3.17 → 3.18.50
linux linux_kernel · 3.19 → 4.1.40
linux linux_kernel · 4.10 → 4.10.12
linux linux_kernel · 4.2 → 4.4.63
linux linux_kernel · 4.5 → 4.9.24

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References