Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernel-xen-develUpgrade kernel-xenUUpgrade kernel-smpUpgrade kernelUpgrade kernel-hugemem-develUpgrade kernel-PAE-develUpgrade kernel-hugememUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | May 7, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 7, 2010 |
| Suse | — | Upgrade ext4dev-kmp-xenUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade kernel-vmi-baseUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-vmiUpgrade iscsitarget-kmp-defaultUpgrade kernel-trace-develUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-ppc64Upgrade kernel-xenUpgrade ext4dev-kmp-vmiUpgrade kernel-xen-develUpgrade oracleasm-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-ppc64-develUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-19-iop32xUpgrade linux-image-2.6.28-19-serverUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.32-24-generic-paeUpgrade linux-image-2.6.31-214-dove-z0Upgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.28-19-ixp4xxUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.32-24-lpiaUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.32-24-powerpc-smpUpgrade linux-image-2.6.32-24-virtualUpgrade linux-image-2.6.32-24-sparc64Upgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.28-19-genericUpgrade linux-image-2.6.32-308-ec2Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.33-502-omapUpgrade linux-image-2.6.32-24-serverUpgrade linux-image-2.6.32-24-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-24-preemptUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.28-19-versatileUpgrade linux-image-2.6.32-207-doveUpgrade linux-image-2.6.32-24-genericUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.32-24-ia64Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.28-19-lpiaUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.28-19-virtualUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.32-24-powerpcUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-24-386Upgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.31-214-doveUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.28-19-imx51Upgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-24-sparc64-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.32-24-versatile | Nov 8, 2024 | May 7, 2010 |
| Vmsa 2010 0016 | — | Upgrade VMware ESX 4.1 to build number 320092 | Nov 19, 2010 | May 7, 2010 |
| Vmsa 2010 0017 | — | Upgrade VMware ESX 4.0 to build number 332073Upgrade VMware ESX 4.1 to build number 320137 | Jan 27, 2013 | May 7, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236 | Feb 16, 2011 | May 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub