The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15951.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"289231606565911742967317925644107348758",
"266211464629185343643617117258834296308",
"182508452234389471541603758378077911813",
"269202636334023012233882023771007955764",
"182849365665975042103444820720397586435",
"18748083598306573298676565899703030587",
"192264470171529245466513959600803121160",
"124675920995423801348555228174958393511"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-1fc1c11a",
"deprecated": false,
"target": {
"file": "security/keys/big_key.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "96013547058281591336688866136644621908",
"length": 2263.0
},
"id": "CVE-2017-15951-21420622",
"deprecated": false,
"target": {
"file": "security/keys/keyctl.c",
"function": "keyctl_chown_key"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"6889568575187955989811487434113431736",
"135109275451255449149296953269803838293",
"238462435984195231239253180617126469416",
"198013724370367604766885831886662087030"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-22f90c3f",
"deprecated": false,
"target": {
"file": "security/keys/trusted.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"202616064714394913346084614857682924535",
"324068564700322362989221790016563322492",
"178427279858453525446818163831888039172",
"287102878170604435855539643188809816431",
"224046071852537184102936002448327172028",
"182389701398792836107278703833322811239",
"245684123138272324026048466794775284488",
"108235033448232002016262262566203701198",
"37626952691254655756162699606441657981",
"263871283102438028866634346843645741941",
"278923129462169290996017634791970336821",
"115507341658599239468044754686836138674",
"206433220388369998090469088119135178959",
"161228858251563643404697455550901155608",
"133379836397615781947495418633228823207",
"27091739461450170483336872431749746790",
"196259831513199978369625979823065518668",
"243674408292010333986103461403066152783",
"26168830344690138413919877126789627724",
"137754461015037575320382049691431379749"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-23401b5b",
"deprecated": false,
"target": {
"file": "include/linux/key.h"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"243979926748690444049740215379663820713",
"282759739456638851271795524064392454417",
"129675744724776715091265054289194790479",
"201802529686654932123337133950804973881"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-23baa55f",
"deprecated": false,
"target": {
"file": "net/dns_resolver/dns_key.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"72337917168082562600748984638011593953",
"157082664757242049070113286713982036953",
"196918683809514032421959122195631490787",
"159061359780743475415649851104798106226",
"172477779700185388148221816940324478581",
"229236171634931931797001848518220617498",
"232909810319016066498192461832396851045",
"279249005841893847261700579861079510053",
"64129667953504540471765042528043401814",
"191282628710757871934390223298407745951",
"77380420710614503784030196703723678488",
"35686570057484121441298275935268203025",
"137988525734715237056191260225190211299",
"309270179372467132808317841881397416227"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-3223c6c0",
"deprecated": false,
"target": {
"file": "security/keys/gc.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"278205238041732608181063605857181480580",
"255498643753763808008030388540979630323",
"224551582241700221299629251619227719058",
"248619246136288310384402751900403109934"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-35875eb2",
"deprecated": false,
"target": {
"file": "security/keys/request_key_auth.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "117759502231379777279004280191661844379",
"length": 449.0
},
"id": "CVE-2017-15951-3bdcec2d",
"deprecated": false,
"target": {
"file": "security/keys/user_defined.c",
"function": "user_update"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "106857222936789073660362542672671105374",
"length": 2145.0
},
"id": "CVE-2017-15951-4e09c7cb",
"deprecated": false,
"target": {
"file": "security/keys/proc.c",
"function": "proc_keys_show"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "252408832008772641689468889181803628945",
"length": 750.0
},
"id": "CVE-2017-15951-58713647",
"deprecated": false,
"target": {
"file": "security/keys/keyctl.c",
"function": "keyctl_read_key"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "6543904721636109703588852054304134828",
"length": 1068.0
},
"id": "CVE-2017-15951-5a4b6ea7",
"deprecated": false,
"target": {
"file": "security/keys/encrypted-keys/encrypted.c",
"function": "encrypted_update"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"200567559507079439220331494427596657977",
"22328612090410964201070988974546534330",
"98568040970475413240709160904906880207",
"323265983871128346606312817638576030470",
"257782663590832748802550622542034353005",
"279920399452795483741125846076887826064",
"193141975707708208753892683084462409560",
"326607303280523669385192912346791698175",
"248623595795593488774967535039840350317",
"148723566892280246105993325047251677835",
"1480205083033971259772196717879115464",
"328819135099402905847925852993584108887",
"318257456953364173099865625011718591178",
"116260730510825401894351640467721475439",
"182361568360567965776354612469373407861",
"258796548178124775729453229752711099152",
"272084786394114615184543618595090207912",
"305266684904566528006441647309341959414",
"201986069947449888954393655554546223933",
"90683032437370509199010650803533995724",
"97173493207900359716274972188697784176",
"313308140856130869630250834842545139806",
"225511222930573896307321867836283704409",
"24281951043861613136041764564685153176",
"157910865685578724096314453672060194899",
"225434374992297452610257077629074853226",
"340145720967857974648166251728384424099",
"10582719389138039937671558570626474924"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-5e5faa65",
"deprecated": false,
"target": {
"file": "security/keys/key.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"225868542111211133865565863093145308757",
"183136198898150052208470436358002313641",
"10685158736244192263594269400673005123",
"272735867821432663577601028220985366435",
"165270228511762315056175463604471409124",
"72307197958817490050490708705897699901",
"128703374854322584615216426968722252301",
"191723607727116401511993559212769167102",
"310493956181806444535012723484301857924",
"319969525510089708797580745518746962049",
"5501296836392952086762866064624514828"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-6099cb09",
"deprecated": false,
"target": {
"file": "security/keys/keyctl.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"202320778656980235244972722165531760972",
"106729075123744989858030780767419395186",
"222855176229500252242271332183744275385",
"114924900546391864224768797673661102072",
"154331179492928299571252039286903281840",
"292629387905532896802015769073499158555",
"221721396821322510335426893401023692611",
"299764123742858289530149551014910007889",
"114461330500863504311685530499785951974",
"41806239724757443329052893562126754398",
"50775152534571434577075521252358277876",
"86672405227032127828577108648544303282",
"294049343000988465864043243889916445856",
"151577257262252482622248033289476014850"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-8110d783",
"deprecated": false,
"target": {
"file": "security/keys/keyring.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"240827732683831714803735848182746991594",
"144893182132782732067259754647072985995",
"216492644305190255377894016685408800806",
"262797137522924531226686476792711480794",
"238351344901505446700438841880204596722",
"29040980357438298873053919396474929240",
"48365752226750277578214361016490676852",
"132199788871491408133817250691060445048",
"155723602339524117302573825662183886391",
"70039696259184203756250379867487706503",
"153329479136056583398957622617117239223",
"137711010650533074505757315657459899829",
"297890730350196082897353483492976865893",
"207806048251008148627956437222559298133",
"54570468249914929068555159866072075232",
"324474891634847170388170956788651781922"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-8926655b",
"deprecated": false,
"target": {
"file": "security/keys/proc.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "204414634622248524126043473724394361981",
"length": 174.0
},
"id": "CVE-2017-15951-8a138ddf",
"deprecated": false,
"target": {
"file": "include/linux/key.h",
"function": "key_is_instantiated"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "18784867410262489572237712885654332819",
"length": 973.0
},
"id": "CVE-2017-15951-9aed02b5",
"deprecated": false,
"target": {
"file": "security/keys/key.c",
"function": "__key_instantiate_and_link"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"293613466460169955443794492698970138802",
"261010651751029318260786908246866453270",
"82864471102302562950260339384549740802",
"16522850721774778512189011560429266966",
"13631987074234727351861053496259009879",
"15886018637853132371511741629715194227",
"62052947510220335895031599270833602041",
"245148783066271385014204662260840434738"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-9b21264c",
"deprecated": false,
"target": {
"file": "security/keys/user_defined.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"152144705559197320433719809058133588182",
"109334446227612222619028414488469417180",
"253275862023821811273037701144553461176",
"331898801639500633107367857222529460196",
"257702814016722486178560304463381646070",
"201417989449702756651409171630056630743",
"91717142528256175320741624661763064866"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-a5801037",
"deprecated": false,
"target": {
"file": "security/keys/request_key.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "206023029434390388868204412119340401269",
"length": 526.0
},
"id": "CVE-2017-15951-aaf29687",
"deprecated": false,
"target": {
"file": "security/keys/key.c",
"function": "__key_update"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "245407227352675951809027759371922638929",
"length": 1459.0
},
"id": "CVE-2017-15951-bdaaa6b5",
"deprecated": false,
"target": {
"file": "security/keys/trusted.c",
"function": "trusted_update"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "119922194671768846312453578586569246863",
"length": 1504.0
},
"id": "CVE-2017-15951-c52e79a1",
"deprecated": false,
"target": {
"file": "security/keys/keyring.c",
"function": "keyring_search_iterator"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "316044623825604618006645183008946977521",
"length": 4160.0
},
"id": "CVE-2017-15951-c6def8ef",
"deprecated": false,
"target": {
"file": "security/keys/process_keys.c",
"function": "lookup_user_key"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "292616790290190888511170486236435094958",
"length": 912.0
},
"id": "CVE-2017-15951-c73c4db9",
"deprecated": false,
"target": {
"file": "security/keys/gc.c",
"function": "key_gc_unused_keys"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "238915887807171529723297083917086948558",
"length": 1156.0
},
"id": "CVE-2017-15951-c9770242",
"deprecated": false,
"target": {
"file": "security/keys/key.c",
"function": "key_reject_and_link"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"70216379355906036397253022488219203681",
"16217057743062290769582382179457848333",
"78593300484206798609555473201253620860",
"265144747451110668463056352760083234525"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-d5673b82",
"deprecated": false,
"target": {
"file": "security/keys/encrypted-keys/encrypted.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "114705349256697469671260020343183190079",
"length": 800.0
},
"id": "CVE-2017-15951-de86f267",
"deprecated": false,
"target": {
"file": "security/keys/key.c",
"function": "key_update"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"line_hashes": [
"173124103179256398299739227332837608390",
"14721645616929790869216745243054842869",
"168761374243210407262778526528135227594",
"3056283706330931635592514874758608524"
],
"threshold": 0.9
},
"id": "CVE-2017-15951-e87c2f59",
"deprecated": false,
"target": {
"file": "security/keys/process_keys.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@363b02dab09b3226f3bd1420dad9c72b79a42a76",
"digest": {
"function_hash": "165264646650932570038092534559920500086",
"length": 347.0
},
"id": "CVE-2017-15951-f971efdf",
"deprecated": false,
"target": {
"file": "security/keys/request_key.c",
"function": "wait_for_key_construction"
}
}
]