Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dereference) or possibly gain privileges by revoking keyring keys being used for ext4, f2fs, or ubifs encryption, causing cryptographic transform objects to be freed prematurely.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7374.json"
[
{
"id": "CVE-2017-7374-01398ed4",
"target": {
"file": "fs/crypto/fname.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"85944406473874534263346631946361271874",
"58625842801934600117806138784802872404",
"232407374985606906631515988130821968857",
"157700131784516973286671118563881781285"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2017-7374-1b6b23e2",
"target": {
"file": "fs/crypto/crypto.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"154856497697682281530535603838133101661",
"174363250669812017049419696005501221567",
"217594561744628286085617923817311882289",
"313333355232133764931385785736817527516",
"204851374420576595200372269789116222062",
"334064539141071742680437546110499980901",
"332464537203736020180772224659185633554",
"162910980839790088820608817249427802409",
"216578369553537893505491096259353898778",
"97132536216684545622864040508857606564",
"92729116841119862338965722638475777030",
"185326165112279568988690604497073365539",
"275177636050358616844924867088693941552",
"276674577428103653587843747882700798631",
"38206055669208395988539552336793865193",
"3849163675001410496531251005731789900",
"239391494408509096813776847753832252981"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2017-7374-3f09068c",
"target": {
"function": "put_crypt_info",
"file": "fs/crypto/keyinfo.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"function_hash": "187620231171644385666569798718876660404",
"length": 181.0
},
"signature_type": "Function"
},
{
"id": "CVE-2017-7374-455c6636",
"target": {
"file": "fs/crypto/keyinfo.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"16344143206694098072225545548796878418",
"118222849950032013904615821028076593365",
"150544944379923131046894979476595060657",
"197402852032705489081896304289851306360",
"232096959927300078074245886554630005571",
"287235349706561634664412171674362097752",
"315777981459427090515428490386972705509",
"185210420024875130906170247352933361228",
"147252148810398283099330951392719506853",
"172505168289185664666995209498835474484",
"121250205351039666495554027119653924440",
"204201791321922358246360867043465135385",
"239225096777613826088141617895735760641",
"205445229070073622147512270456026791705",
"195182563873102636821932339944740416495",
"46308160230505922886848188236705302992",
"269915622590702700931472394576717948472",
"312978868840951455103298248609804394001",
"25352231093474654412921778386936227534",
"246477183429953463187241632723648384878",
"59417701915782532994389460588536292265",
"226806305326276210879962104710412682907",
"124160150681645472395914899351029870123",
"238147084181371588912482364349918374854",
"339482642645629404200257654243352447251",
"65670637888748922468638810312060359646",
"293694513081232341030071889223693605056",
"197016652788959696452702044413194940054",
"252875258144561956632708944962564670180",
"212092193872154241637677241774528715024",
"264681545803289916125268866520161599572",
"187059334568745633947267382085833021693",
"93021475279919466889012390825260997552",
"49669358186318036368483937944389720019",
"310099758981748422328542277538765402345",
"49553374468357131306141204656909518731",
"216656786786961043003275677804181879735",
"157192563127049198866115757355398604301",
"5427398923733715532396763679979337594",
"262639952077197059126904094163300468352",
"140777884094345948780123438209588392483",
"263118975889581745084309029702465419228",
"153810388262989953843944834428812823035",
"99765600639179567375764463074200049748",
"217938467146662037113030982887678202004",
"34731436783036465738721601569386227245",
"297062563984359234022584834633089135686",
"248913315699968538914327964361379717444",
"255799276309140817825922008436706081791",
"130269204327248722746111805467917883438",
"202047771258278487009789170844669927720",
"240327852137450028442402670162059003348",
"12088255041923585988689729549261679902",
"305084582836349013114647508453457978774",
"184456939409811629417357506662004701922",
"37155553208370906211791451982012640955",
"162360302015194396612089522411170375984",
"169167615869345204669774757046411253088",
"7672928176067294202478942861131252007",
"162011760551503122279246957651289479821",
"309099155112891621342990404318538705471",
"297400085264393886176053732322462715996",
"62058501709595599704786029652918628734",
"315003365251394561054222800538315893918",
"282933153470987048318268923786224179471",
"279444910389369011195017398610960986965",
"12580237922822723153104579648015496581",
"7607913337120308554004369253279883299",
"313065270603873129853008718845462484024",
"305179314500139057766714196454818020330",
"234041335660088534844233925489351182310",
"209253204581677119061441567062959155348",
"236752077998628956240180605299319191664",
"9044429226957593312542451862417811802",
"266480735441254137581883633658527997053",
"325855200423533638755906838570798054762",
"5352825391524210876028458785898075096",
"169235789903779314980356645377033275544",
"52337154621177500311464960015404073287",
"79566815370786887615166812684872098413"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2017-7374-49742186",
"target": {
"function": "fscrypt_d_revalidate",
"file": "fs/crypto/crypto.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"function_hash": "294140432038045574169948351044363456049",
"length": 777.0
},
"signature_type": "Function"
},
{
"id": "CVE-2017-7374-5f156d7f",
"target": {
"function": "fscrypt_get_encryption_info",
"file": "fs/crypto/keyinfo.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"function_hash": "336564776167007210368002517302756889896",
"length": 282.0
},
"signature_type": "Function"
},
{
"id": "CVE-2017-7374-9503ec1b",
"target": {
"function": "fscrypt_get_crypt_info",
"file": "fs/crypto/keyinfo.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"function_hash": "97381487712696563101027017986711075979",
"length": 2631.0
},
"signature_type": "Function"
},
{
"id": "CVE-2017-7374-ce8862e0",
"target": {
"file": "fs/crypto/fscrypt_private.h"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"108702305087093132866432880642339007187",
"109213382691310356146411599537526610226",
"265598874087735213200389334999721456493",
"58895943511753596296173759315677165691",
"152353351150940974082073094969706643377",
"300059447869650954394011885193448541969"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2017-7374-df1e03f6",
"target": {
"function": "validate_user_key",
"file": "fs/crypto/keyinfo.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1b53cf9815bb4744958d41f3795d5d5a1d365e2d",
"digest": {
"function_hash": "186541071246014961830176923965855144058",
"length": 1213.0
},
"signature_type": "Function"
}
]