CVE-2017-12153

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

• CWE-476
• CWE-476

• http://seclists.org/oss-sec/2017/q3/437Mailing List, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/100855Third Party Advisory, VDB Entry
• https://bugzilla.novell.com/show_bug.cgi?id=1058410Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1491046Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888Issue Tracking, Patch, Third Party Advisory
• https://marc.info/?t=150525503100001&r=1&w=2Patch, Third Party Advisory
• https://usn.ubuntu.com/3583-1/Third Party Advisory
• https://usn.ubuntu.com/3583-2/Third Party Advisory
• http://seclists.org/oss-sec/2017/q3/437Mailing List, Patch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3981Third Party Advisory
• http://www.securityfocus.com/bid/100855Third Party Advisory, VDB Entry
• https://bugzilla.novell.com/show_bug.cgi?id=1058410Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1491046Issue Tracking, Patch, Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git/commit/?id=e785fa0a164aa11001cba931367c7f94ffaff888Issue Tracking, Patch, Third Party Advisory
• https://marc.info/?t=150525503100001&r=1&w=2Patch, Third Party Advisory
• https://usn.ubuntu.com/3583-1/Third Party Advisory
• https://usn.ubuntu.com/3583-2/Third Party Advisory

Published

Sep 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12146The driver_override implementation in drivers/base/platform.…7
• CVE-2017-12148A flaw was found in Ansible Tower's interface before 3.1.5 a…8.4
• CVE-2017-12149In Jboss Application Server as shipped with Red Hat Enterpri…9.8
• CVE-2017-12150It was found that samba before 4.4.16, 4.5.x before 4.5.14, …7.4
• CVE-2017-12151A flaw was found in the way samba client before samba 4.4.16…7.4
• CVE-2017-12152Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-12154The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Lin…
• CVE-2017-12155A resource-permission flaw was found in the openstack-triple…
• CVE-2017-12156Moodle 3.x has XSS in the contact form on the "non-responden…
• CVE-2017-12157In Moodle 3.x, various course reports allow teachers to view…
• CVE-2017-12158It was found that Keycloak would accept a HOST header URL in…
• CVE-2017-12159It was found that the cookie used for CSRF prevention in Key…