FlawAtlas
Search the atlas
UBUNTU-CVE-2017-15951 High

UBUNTU-CVE-2017-15951

The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

Exploit probability Not scored
Published October 27, 2017
Required by Not available
Last source change April 22, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:14.04:LTS linux-aws

1 explicit affected versions

Ubuntu:14.04:LTS linux-lts-xenial

41 explicit affected versions

Ubuntu:16.04:LTS linux

63 explicit affected versions

Ubuntu:16.04:LTS linux-aws

22 explicit affected versions

Ubuntu:16.04:LTS linux-azure

6 explicit affected versions

Ubuntu:16.04:LTS linux-gcp

5 explicit affected versions

Ubuntu:16.04:LTS linux-gke

19 explicit affected versions

Ubuntu:16.04:LTS linux-hwe

26 explicit affected versions

Ubuntu:16.04:LTS linux-kvm

4 explicit affected versions

Ubuntu:16.04:LTS linux-oem

1 explicit affected versions

Ubuntu:16.04:LTS linux-raspi2

39 explicit affected versions

Ubuntu:16.04:LTS linux-snapdragon

36 explicit affected versions

Ubuntu:18.04:LTS linux-hwe

43 explicit affected versions

Ubuntu:18.04:LTS linux-hwe-edge

10 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde

26 explicit affected versions

Ubuntu:20.04:LTS linux-gke

51 explicit affected versions

Ubuntu:20.04:LTS linux-raspi2

6 explicit affected versions

Ubuntu:20.04:LTS linux-riscv

12 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iot-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-realtime

1 explicit affected versions

Ubuntu:22.04:LTS linux-riscv

23 explicit affected versions

Ubuntu:24.04:LTS linux-raspi-realtime

1 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

related USN-3507-1

04 / EVIDENCE

Source records

Open Source Vulnerabilities UBUNTU-CVE-2017-15951

The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.

View original source

05 / REFERENCES

Further evidence