cve/2017/CVE-2017-12153.md

### [CVE-2017-12153](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12153)
![](https://img.shields.io/static/v1?label=Product&message=kernel%20since%20v3.1-rc1%20through%20v4.13&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20kernel%20since%20v3.1-rc1%20through%20v4.13%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-476&color=brighgreen)

### Description

A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not check whether the required attributes are present in a Netlink request. This request can be issued by a user with the CAP_NET_ADMIN capability and may result in a NULL pointer dereference and system crash.

### POC

#### Reference
- http://seclists.org/oss-sec/2017/q3/437
- https://usn.ubuntu.com/3583-2/

#### Github
- https://github.com/ARPSyndicate/cvemon