The iscsiifrx function in drivers/scsi/scsitransportiscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service (panic) by leveraging incorrect length validation.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14489.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "4.13.2" } ] } ]