The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Apr 28, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debug-devel | Dec 4, 2019 | May 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Nov 19, 2019 | May 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Apr 1, 2017 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 26, 2018 | Apr 28, 2017 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-extra | Jan 4, 2018 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-genericUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2 | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub