Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
CVSS Details
- CVSS 3.1 Base Score: 6.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.8.1-6-power3-smpUpgrade linux-image-2.6.8.1-6-amd64-xeonUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.8.1-6-amd64-genericUpgrade linux-image-2.6.8.1-6-powerpcUpgrade linux-image-2.6.8.1-6-powerpc-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.8.1-6-power4 | Nov 8, 2024 | Mar 14, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub