The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xen | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 15, 2011 |
| Suse | — | Upgrade kernel-kdumppaeUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-debugUpgrade kernel-ppc64Upgrade kernel-rt_trace-baseUpgrade kernel-rt_trace-develUpgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-rtUpgrade ofed-kmp-rtUpgrade kernel-vmiUpgrade kernel-rt-develUpgrade iscsitarget-kmp-rtUpgrade kernel-vmipaeUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-kdumpUpgrade kernel-rt-baseUpgrade drbd-kmp-rt_traceUpgrade drbd-kmp-rtUpgrade cluster-network-kmp-rtUpgrade kernel-xenUpgrade brocade-bna-kmp-rtUpgrade kernel-bigsmpUpgrade kernel-rt_traceUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-xenpaeUpgrade ocfs2-kmp-rt_traceUpgrade kernel-source-rt | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-38-serverUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.32-38-lpiaUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.32-38-sparc64Upgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.32-38-genericUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.32-38-powerpcUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.32-342-ec2Upgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-38-versatileUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.32-422-doveUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-38-powerpc-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.32-38-386Upgrade linux-image-2.6.32-38-powerpc64-smpUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.32-38-sparc64-smpUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.32-38-virtualUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.32-38-generic-paeUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-38-ia64Upgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-38-preemptUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-3.0.0-15-powerpc | Nov 8, 2024 | Jan 27, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Jan 27, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub