VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel. 

Advisory: CVE-2017-15274
  Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-15274
  CVSS severity score: 4.9/10.0
  Description:

security/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL payload in conjunction with a nonzero length value, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call, a different vulnerability than CVE-2017-12192.



This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.