The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernel-xenUpgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-headers | Dec 1, 2016 | Jan 27, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 27, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 15, 2011 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-rt_traceUpgrade kernel-bigsmpUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-xenUpgrade brocade-bna-kmp-rtUpgrade kernel-xenpaeUpgrade ocfs2-kmp-rt_traceUpgrade ocfs2-kmp-rtUpgrade cluster-network-kmp-rt_traceUpgrade kernel-rtUpgrade cluster-network-kmp-rtUpgrade kernel-kdumpUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-iseries64Upgrade drbd-kmp-rt_traceUpgrade kernel-vmipaeUpgrade kernel-vmiUpgrade iscsitarget-kmp-rtUpgrade ofed-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-sourceUpgrade kernel-rt_trace-baseUpgrade kernel-rt-develUpgrade drbd-kmp-rtUpgrade kernel-smpUpgrade kernel-debugUpgrade kernel-rt_trace-develUpgrade kernel-kdumppaeUpgrade SUSE-Linux-Enterprise-RT-release | Feb 17, 2015 | Jan 27, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-38-preemptUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.32-38-powerpc64-smpUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.32-38-generic-paeUpgrade linux-image-2.6.32-38-virtualUpgrade linux-image-3.0.0-15-generic-paeUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.32-38-386Upgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-3.0.0-15-genericUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.32-38-sparc64-smpUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.32-38-ia64Upgrade linux-image-2.6.31-612-imx51Upgrade linux-image-3.0.0-15-powerpcUpgrade linux-image-3.0.0-15-serverUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-3.0.0-15-omapUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-38-sparc64Upgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.32-38-versatileUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.32-38-powerpcUpgrade linux-image-3.0.0-15-powerpc64-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.32-38-serverUpgrade linux-image-2.6.32-422-doveUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.32-38-lpiaUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.32-38-genericUpgrade linux-image-3.0.0-15-powerpc-smpUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.32-38-powerpc-smpUpgrade linux-image-2.6.32-342-ec2Upgrade linux-image-3.0.0-15-virtualUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-30-lpiacompat | Nov 8, 2024 | Jan 27, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380Upgrade VMware ESX 4.0 to build number 787047 | Sep 17, 2012 | Jan 27, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub