Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Sep 20, 2017 | Aug 31, 2015 |
| Centos_linux | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools | Dec 1, 2016 | Aug 31, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 31, 2015 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-default | Dec 18, 2015 | Aug 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-59-generic-lpaeUpgrade linux-image-3.16.0-45-powerpc64-embUpgrade linux-image-3.19.0-25-genericUpgrade linux-image-3.13.0-59-powerpc-e500Upgrade linux-image-3.19.0-25-powerpc64-smpUpgrade linux-image-3.16.0-45-genericUpgrade linux-image-3.16.0-45-generic-lpaeUpgrade linux-image-3.19.0-25-powerpc-e500mcUpgrade linux-image-3.13.0-59-powerpc-smpUpgrade linux-image-3.16.0-45-powerpc-e500mcUpgrade linux-image-3.16.0-45-powerpc-smpUpgrade linux-image-3.13.0-59-powerpc64-embUpgrade linux-image-3.13.0-59-lowlatencyUpgrade linux-image-3.13.0-59-powerpc-e500mcUpgrade linux-image-3.19.0-25-powerpc64-embUpgrade linux-image-3.19.0-25-generic-lpaeUpgrade linux-image-3.16.0-45-powerpc64-smpUpgrade linux-image-3.13.0-59-genericUpgrade linux-image-3.16.0-45-lowlatencyUpgrade linux-image-3.19.0-25-powerpc-smpUpgrade linux-image-3.13.0-59-powerpc64-smpUpgrade linux-image-3.19.0-25-lowlatency | Nov 8, 2024 | Aug 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub