Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade python-perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-develUpgrade kernel-firmware | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 9, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-2.6.32-73-generic-paeUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-2.6.32-73-sparc64Upgrade linux-image-2.6.32-73-386Upgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.13.0-46-powerpc-e500Upgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-2.6.32-73-powerpcUpgrade linux-image-2.6.32-73-versatileUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-2.6.32-376-ec2Upgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-2.6.32-73-lpiaUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-2.6.32-73-genericUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-2.6.32-73-virtualUpgrade linux-image-2.6.32-73-powerpc64-smpUpgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-2.6.32-73-sparc64-smpUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-2.6.32-73-powerpc-smpUpgrade linux-image-2.6.32-73-serverUpgrade linux-image-2.6.32-73-ia64Upgrade linux-image-3.2.0-77-virtualUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-2.6.32-73-preemptUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-3.16.0-31-powerpc-e500mc | Nov 8, 2024 | Jan 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub