VULNERABILITY INTELLIGENCE

CVE-2017-9211

CVSS score5.5 MEDIUM
EPSS probability0.39%
CISA KEVNot currently listed
Published2017-05-23
Last modified2026-06-17

Description

The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service (NULL pointer dereference) via a crafted application.