CVE-2017-15116
published 2017-11-30CVE-2017-15116: The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
PriorityP418medium5.5CVSS 3.0
AVLACLPRLUINSUCNINAH
EPSS
0.38%
30.0th percentile
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 4.2.1-1 (bookworm) | linux 4.2.1-1 (bookworm) |
| linux | linux_kernel | < 4.2 | 4.2 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 4.2.1-1 | 4.2.1-1 |
| linux | linux_kernel | >= 0 < 4.2.1-1 | 4.2.1-1 |
| linux | linux_kernel | >= 0 < 4.2.1-1 | 4.2.1-1 |
| linux | linux_kernel | >= 0 < 4.2.1-1 | 4.2.1-1 |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6j2g-ffvm-v4hw: The rngapi_reset function in crypto/rng
ghsa_unreviewed·2022-05-14
CVE-2017-15116 [MEDIUM] CWE-476 GHSA-6j2g-ffvm-v4hw: The rngapi_reset function in crypto/rng
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
OSV
CVE-2017-15116: The rngapi_reset function in crypto/rng
osv·2017-11-30·CVSS 5.5
CVE-2017-15116 [MEDIUM] CVE-2017-15116: The rngapi_reset function in crypto/rng
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Red Hat
kernel: Null pointer dereference in rngapi_reset function
vendor_redhat·2017-08-28·CVSS 5.5
CVE-2017-15116 [MEDIUM] CWE-119 kernel: Null pointer dereference in rngapi_reset function
kernel: Null pointer dereference in rngapi_reset function
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
A flaw was found in the Linux kernel's random number generator API. A null pointer dereference in the rngapi_reset function may result in denial of service, crashing the system.
Statement: This issue does not affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5 and 6 and kernel-alt.
This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7 and MRG-2.
Future Linux kernel updates for the respective releases may address this issue.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6)
Debian
CVE-2017-15116: linux - The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows ...
vendor_debian·2017·CVSS 5.5
CVE-2017-15116 [MEDIUM] CVE-2017-15116: linux - The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows ...
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
Scope: local
bookworm: resolved (fixed in 4.2.1-1)
bullseye: resolved (fixed in 4.2.1-1)
forky: resolved (fixed in 4.2.1-1)
sid: resolved (fixed in 4.2.1-1)
trixie: resolved (fixed in 4.2.1-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function [fedora-all]
bugzilla·2017-11-30·CVSS 5.5
CVE-2017-15116 [MEDIUM] CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function [fedora-all]
CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported
Bugzilla
CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function
bugzilla·2017-11-17·CVSS 5.5
CVE-2017-15116 [MEDIUM] CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function
CVE-2017-15116 kernel: Null pointer dereference in rngapi_reset function
A flaw was found in the kernel random number generator api. A null pointer dereference in in rngapi_reset function may result in denial of service. Crashing the system.
References:
https://bugzilla.redhat.com/show_bug.cgi?id=1485815
Upstream patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8fded5925d0a733c46f8d0b5edd1c9b315882b1d
Discussion:
Statement:
This issue does not affect the Linux kernel packages as shipped with Red Hat
Enterprise Linux 5 and 6 and kernel-alt.
This issue affects the Linux kernel packages as shipped with Red Hat
Enterprise Linux 7 and MRG-2.
Future Linux kernel updates for the respective releases may address this issue.
---
Created kernel tracking
arXiv
Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond
arxiv_fulltext·2025-06-11
Mono: Is Your "Clean" Vulnerability Dataset Really Solvable? Exposing and Trapping Undecidable Patches and Beyond
: Is Your "Clean" Vulnerability Dataset Really Solvable?
Exposing and Trapping Undecidable Patches and Beyond
@IEEEauthorhalign
@IEEEauthorhalign
Zeyu Gao1 1Equal contribution
Tsinghua University
[email protected]
Junlin Zhou1
Sichuan University
[email protected]
Bolun Zhang
Institute of Information Engineering,
Chinese Academy of Sciences
[email protected]
Yi He
Wuhan University
[email protected]
Chao Zhang22Corresponding author
Tsinghua University
[email protected]
Yuxin Cui
Tsinghua University
[email protected]
Hao Wang
Tsinghua University
[email protected]
## Abstract
The quantity and quality of vulnerability datasets are essential for developing deep learning solutions to vulnerability-related tasks. Due
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6https://access.redhat.com/errata/RHSA-2018:0676https://access.redhat.com/errata/RHSA-2018:1062https://bugzilla.redhat.com/show_bug.cgi?id=1485815https://bugzilla.redhat.com/show_bug.cgi?id=1514609https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6https://access.redhat.com/errata/RHSA-2018:0676https://access.redhat.com/errata/RHSA-2018:1062https://bugzilla.redhat.com/show_bug.cgi?id=1485815https://bugzilla.redhat.com/show_bug.cgi?id=1514609https://github.com/torvalds/linux/commit/94f1bb15bed84ad6c893916b7e7b9db6f1d7eec6
2017-11-30
Published