crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue.
[
{
"events": [
{
"introduced": "3.15"
},
{
"fixed": "3.16.44"
}
]
},
{
"events": [
{
"introduced": "3.17"
},
{
"fixed": "3.18.50"
}
]
},
{
"events": [
{
"introduced": "3.19"
},
{
"fixed": "4.1.40"
}
]
},
{
"events": [
{
"introduced": "4.2"
},
{
"fixed": "4.4.63"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.24"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.10.12"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7618.json"