CVE-2017-15274

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.5

Description The issue allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add key or keyctl system call. This occurs because the Linux kernel does not consider the case of a NULL payload in conjunction with a nonzero length value.

Recommendations For Linux kernel versions prior to 4.11.5, update to version 4.11.5 or later to resolve the issue.