High severity7.8NVD Advisory· Published Aug 24, 2017· Updated Jun 17, 2026
CVE-2017-13686
CVE-2017-13686
Description
net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via crafted system calls. NOTE: this does not affect any stable release.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:linux:linux_kernel:4.13:rc1:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:linux:linux_kernel:4.13:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:4.13:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:4.13:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:4.13:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:4.13:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:4.13:rc6:*:*:*:*:*:*
- (no CPE)range: 4.13-rc1 through 4.13-rc6
Patches
Vulnerability mechanics
References
2- git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdPatchVendor Advisory
- github.com/torvalds/linux/commit/bc3aae2bbac46dd894c89db5d5e98f7f0ef9e205nvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.