Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-debug-devel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Suse | — | Upgrade gfs2-kmp-paeUpgrade kernel-source-vanillaUpgrade cluster-network-kmp-xenUpgrade kernel-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-trace-extraUpgrade kernel-develUpgrade kernel-vanillaUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-xenUpgrade kernel-xenUpgrade kernel-ppc64-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-desktop-develUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-trace-baseUpgrade ocfs2-kmp-ppc64Upgrade btrfs-kmp-xenUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-xenUpgrade kernel-xen-extraUpgrade cluster-network-kmp-paeUpgrade kernel-symsUpgrade xen-kmp-paeUpgrade kernel-trace-develUpgrade gfs2-kmp-xenUpgrade kernel-paeUpgrade sle-hae-releaseUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-traceUpgrade kernel-ec2-baseUpgrade kernel-default-develUpgrade ext4dev-kmp-paeUpgrade kernel-default-extraUpgrade kernel-pae-extraUpgrade kernel-default-manUpgrade btrfs-kmp-paeUpgrade kernel-ec2Upgrade hyper-v-kmp-defaultUpgrade hyper-v-kmp-paeUpgrade xen-kmp-traceUpgrade gfs2-kmp-ppc64Upgrade hyper-v-kmp-traceUpgrade kernel-pae-baseUpgrade cluster-network-kmp-defaultUpgrade kernel-debug-baseUpgrade cluster-network-kmp-traceUpgrade kernel-ec2-develUpgrade kernel-desktop-baseUpgrade gfs2-kmp-traceUpgrade kernel-traceUpgrade kernel-ppc64-develUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade ext4dev-kmp-defaultUpgrade ocfs2-kmp-pae | Feb 17, 2015 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.0.0-32-omapUpgrade linux-image-2.6.32-46-versatileUpgrade linux-image-3.0.0-32-powerpc-smpUpgrade linux-image-2.6.32-351-ec2Upgrade linux-image-3.0.0-32-serverUpgrade linux-image-3.2.0-40-virtualUpgrade linux-image-3.2.0-40-powerpc-smpUpgrade linux-image-2.6.32-46-powerpcUpgrade linux-image-2.6.32-46-genericUpgrade linux-image-2.6.32-46-virtualUpgrade linux-image-2.6.32-46-386Upgrade linux-image-3.0.0-32-genericUpgrade linux-image-3.5.0-27-powerpc64-smpUpgrade linux-image-2.6.32-46-sparc64-smpUpgrade linux-image-3.2.0-1429-omap4Upgrade linux-image-3.5.0-27-omapUpgrade linux-image-2.6.32-46-lpiaUpgrade linux-image-3.0.0-32-generic-paeUpgrade linux-image-2.6.32-46-generic-paeUpgrade linux-image-3.5.0-222-omap4Upgrade linux-image-3.0.0-32-virtualUpgrade linux-image-3.0.0-32-powerpcUpgrade linux-image-2.6.32-46-ia64Upgrade linux-image-2.6.32-46-powerpc64-smpUpgrade linux-image-3.2.0-40-highbankUpgrade linux-image-3.0.0-32-powerpc64-smpUpgrade linux-image-3.5.0-27-powerpc-smpUpgrade linux-image-3.2.0-40-omapUpgrade linux-image-3.5.0-27-highbankUpgrade linux-image-2.6.32-46-preemptUpgrade linux-image-2.6.32-46-powerpc-smpUpgrade linux-image-3.2.0-40-generic-paeUpgrade linux-image-3.5.0-27-genericUpgrade linux-image-3.2.0-40-powerpc64-smpUpgrade linux-image-2.6.32-46-serverUpgrade linux-image-2.6.32-46-sparc64Upgrade linux-image-3.2.0-40-generic | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub