The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkey_keyring calls.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7472.json"
[
{
"signature_type": "Function",
"target": {
"file": "security/keys/process_keys.c",
"function": "install_process_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-197f7bcb",
"signature_version": "v1",
"digest": {
"function_hash": "279900438014228666185204849021991374483",
"length": 273.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Line",
"target": {
"file": "security/keys/process_keys.c"
},
"deprecated": false,
"id": "CVE-2017-7472-443c355d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"230201052770534200084610269231264027362",
"320011704513400631287007178696886099620",
"40509884870024267605555777023093196703",
"10609804469668953597344026135688553753",
"255607644420930312213705586319379658009",
"117284808269057458385541094660355676650",
"236764812739909526745023985723482471185",
"283692417292465120757898890401008247835",
"15150113315368102877020260217051943706",
"120304580352992139806659405288451373725",
"69797626301660964095587320055882204283",
"106743055143278043425825005311317439057",
"227619978959521277598832037990506402929",
"90334506506707536478480668264336085648",
"339252879374768223050130565063681631694",
"137452070807470427534177424761484483759",
"183923620546858249943028827639289274201",
"20273204181505297801365071717660575453",
"188102806206495302140691704055815353407",
"80700483808305234490191665991495135309",
"279716276698927911450159915190181864498",
"135855141049982411303263148429732352963",
"177916559399073956291239199073731687599",
"111133638890627182978945160447308815558",
"23083798198909363352890594855840998184",
"173040539406771367796445340572836611296",
"276947980849616156111557031165512797642",
"230302114336854581398202278535838025601",
"76151270466807087894135462586437871111",
"236819354565349771807160792234128758470",
"309716906712027269753869902817726233972",
"234776601998237190925040401894523799888",
"108514426235652132881506226301709734714",
"26122213367306846399133403880248200337"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Function",
"target": {
"file": "security/keys/keyctl.c",
"function": "keyctl_set_reqkey_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-6637ca2d",
"signature_version": "v1",
"digest": {
"function_hash": "192074123926201409005873259904643490335",
"length": 946.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Function",
"target": {
"file": "security/keys/process_keys.c",
"function": "install_thread_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-c168aa67",
"signature_version": "v1",
"digest": {
"function_hash": "99045567472294211783145739439467741062",
"length": 285.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Line",
"target": {
"file": "security/keys/keyctl.c"
},
"deprecated": false,
"id": "CVE-2017-7472-d6c378e8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"282269708901005766784341310415312430145",
"123872438045630704914711162148627933273",
"230752184271834041992762290169108330731",
"223220256958508666627926201397542072397",
"57817231843032631586404582974517838129",
"204824371486730373291247152517686338641",
"335229750818234456849200717954965987483",
"234667126596584005252969009517914482720",
"24280739526185276040180737423879152592",
"164379426233668170623696489156756143432",
"333037105507777322601379749313930186745"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@c9f838d104fed6f2f61d68164712e3204bf5271b"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7472.json"
[
{
"signature_type": "Function",
"target": {
"file": "security/keys/keyctl.c",
"function": "keyctl_set_reqkey_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-093ff633",
"signature_version": "v1",
"digest": {
"function_hash": "192074123926201409005873259904643490335",
"length": 946.0
},
"source": "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Line",
"target": {
"file": "security/keys/process_keys.c"
},
"deprecated": false,
"id": "CVE-2017-7472-56959e3e",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"230201052770534200084610269231264027362",
"320011704513400631287007178696886099620",
"40509884870024267605555777023093196703",
"10609804469668953597344026135688553753",
"255607644420930312213705586319379658009",
"117284808269057458385541094660355676650",
"236764812739909526745023985723482471185",
"283692417292465120757898890401008247835",
"15150113315368102877020260217051943706",
"120304580352992139806659405288451373725",
"69797626301660964095587320055882204283",
"106743055143278043425825005311317439057",
"227619978959521277598832037990506402929",
"90334506506707536478480668264336085648",
"339252879374768223050130565063681631694",
"137452070807470427534177424761484483759",
"183923620546858249943028827639289274201",
"20273204181505297801365071717660575453",
"188102806206495302140691704055815353407",
"80700483808305234490191665991495135309",
"279716276698927911450159915190181864498",
"135855141049982411303263148429732352963",
"177916559399073956291239199073731687599",
"111133638890627182978945160447308815558",
"23083798198909363352890594855840998184",
"173040539406771367796445340572836611296",
"276947980849616156111557031165512797642",
"230302114336854581398202278535838025601",
"76151270466807087894135462586437871111",
"236819354565349771807160792234128758470",
"309716906712027269753869902817726233972",
"234776601998237190925040401894523799888",
"108514426235652132881506226301709734714",
"26122213367306846399133403880248200337"
]
},
"source": "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Line",
"target": {
"file": "security/keys/keyctl.c"
},
"deprecated": false,
"id": "CVE-2017-7472-c3faef19",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"282269708901005766784341310415312430145",
"123872438045630704914711162148627933273",
"230752184271834041992762290169108330731",
"223220256958508666627926201397542072397",
"57817231843032631586404582974517838129",
"204824371486730373291247152517686338641",
"335229750818234456849200717954965987483",
"234667126596584005252969009517914482720",
"24280739526185276040180737423879152592",
"164379426233668170623696489156756143432",
"333037105507777322601379749313930186745"
]
},
"source": "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Function",
"target": {
"file": "security/keys/process_keys.c",
"function": "install_thread_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-c9ebe587",
"signature_version": "v1",
"digest": {
"function_hash": "99045567472294211783145739439467741062",
"length": 285.0
},
"source": "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b"
},
{
"signature_type": "Function",
"target": {
"file": "security/keys/process_keys.c",
"function": "install_process_keyring"
},
"deprecated": false,
"id": "CVE-2017-7472-f604fa16",
"signature_version": "v1",
"digest": {
"function_hash": "279900438014228666185204849021991374483",
"length": 273.0
},
"source": "https://github.com/torvalds/linux/commit/c9f838d104fed6f2f61d68164712e3204bf5271b"
}
]