Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-firmwareUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-develUpgrade kernel-abi-whitelists | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 9, 2015 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-2.6.32-73-powerpcUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-2.6.32-73-sparc64Upgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-2.6.32-73-versatileUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-2.6.32-73-generic-paeUpgrade linux-image-2.6.32-73-386Upgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-2.6.32-73-powerpc-smpUpgrade linux-image-2.6.32-73-virtualUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-2.6.32-73-lpiaUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-2.6.32-73-genericUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-2.6.32-73-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-2.6.32-73-serverUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-2.6.32-376-ec2Upgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-2.6.32-73-sparc64-smpUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-2.6.32-73-ia64Upgrade linux-image-2.6.32-73-preemptUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.2.0-77-powerpc64-smp | Nov 8, 2024 | Jan 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub