The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade perfUpgrade kernel-firmwareUpgrade kernelUpgrade python-perfUpgrade kernel-doc | Dec 1, 2016 | Aug 9, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 9, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 9, 2012 |
| Suse | — | Upgrade ext4dev-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-default-baseUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-xenUpgrade kernel-pae-develUpgrade kernel-ec2-develUpgrade kernel-symsUpgrade btrfs-kmp-defaultUpgrade kernel-trace-baseUpgrade hyper-v-kmp-paeUpgrade kernel-pae-extraUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade xen-kmp-paeUpgrade kernel-default-manUpgrade ext4dev-kmp-traceUpgrade kernel-ppc64-baseUpgrade ext4dev-kmp-paeUpgrade kernel-default-develUpgrade btrfs-kmp-paeUpgrade kernel-trace-extraUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64Upgrade ext4dev-kmp-xenUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-paeUpgrade xen-kmp-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-44-virtualUpgrade linux-image-2.6.32-44-sparc64Upgrade linux-image-3.0.0-20-virtualUpgrade linux-image-2.6.38-16-omapUpgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-2.6.32-44-sparc64-smpUpgrade linux-image-2.6.38-16-versatileUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.32-44-preemptUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-2.6.32-349-ec2Upgrade linux-image-2.6.38-16-powerpc64-smpUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-2.6.38-16-generic-paeUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.32-44-genericUpgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-2.6.32-44-386Upgrade linux-image-3.0.0-20-genericUpgrade linux-image-2.6.32-44-powerpc64-smpUpgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.32-44-lpiaUpgrade linux-image-2.6.38-16-powerpc-smpUpgrade linux-image-3.2.0-24-omapUpgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-2.6.38-16-virtualUpgrade linux-image-2.6.32-44-serverUpgrade linux-image-2.6.32-44-versatileUpgrade linux-image-2.6.32-44-ia64Upgrade linux-image-2.6.38-16-powerpcUpgrade linux-image-2.6.32-44-generic-paeUpgrade linux-image-2.6.32-44-powerpcUpgrade linux-image-2.6.38-16-serverUpgrade linux-image-3.2.0-24-virtualUpgrade linux-image-2.6.38-16-genericUpgrade linux-image-2.6.32-44-powerpc-smp | Nov 8, 2024 | Aug 9, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub