The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade fglrx-kernel-sourceUpgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-image-2.6.10-6-amd64-genericUpgrade xorg-driver-fglrxUpgrade linux-image-k7Upgrade linux-power3Upgrade linux-power4-smpUpgrade linux-image-2.6.15-25-serverUpgrade linux-restricted-modules-k7Upgrade linux-image-2.6.15-25-k7Upgrade avm-fritz-firmwareUpgrade linux-image-2.6.10-6-power4Upgrade linux-k7-smpUpgrade linux-amd64-xeonUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-amd64-genericUpgrade linux-image-amd64-k8Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-amd64-k8Upgrade linux-restricted-modules-commonUpgrade avm-fritz-kernel-sourceUpgrade linux-powerpc-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-amd64-serverUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-restricted-modules-2.6.15-25-powerpcUpgrade avm-fritz-firmware-2.6.15-25Upgrade linux-restricted-modules-2.6.15-25-686Upgrade linux-image-386Upgrade linux-image-686Upgrade linux-serverUpgrade linux-image-2.6.12-10-k7Upgrade linux-restricted-modules-386Upgrade linux-tree-2.6.12Upgrade linux-power4Upgrade linux-image-power4Upgrade linux-image-2.6.15-25-686Upgrade linux-image-2.6.10-6-686-smpUpgrade linux-powerpcUpgrade linux-image-2.6.10-6-k7Upgrade linux-restricted-modules-686Upgrade linux-restricted-modules-amd64-k8Upgrade linux-restricted-modules-2.6.15-25-k7Upgrade fglrx-controlUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-power4-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.15-25-powerpc-smpUpgrade linux-tree-2.6.10Upgrade linux-386Upgrade linux-image-2.6.10-6-386Upgrade linux-server-bigironUpgrade linux-restricted-modules-powerpc-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-server-bigironUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-restricted-modules-amd64-genericUpgrade linux-image-2.6.15-25-amd64-serverUpgrade linux-image-2.6.10-6-amd64-k8Upgrade xorg-driver-fglrx-devUpgrade linux-image-2.6.15-25-server-bigironUpgrade linux-image-2.6.15-25-powerpcUpgrade linux-image-2.6.15-25-amd64-genericUpgrade linux-image-power3-smpUpgrade linux-restricted-modules-2.6.15-25-powerpc-smpUpgrade linux-image-2.6.12-10-386Upgrade linux-amd64-serverUpgrade linux-powerpc64-smpUpgrade linux-image-amd64-xeonUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-restricted-modules-2.6.15-25-386Upgrade linux-patch-ubuntu-2.6.12Upgrade nvidia-glx-legacyUpgrade linux-restricted-modules-powerpcUpgrade nvidia-glx-devUpgrade linux-686-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-source-2.6.12Upgrade linux-amd64-genericUpgrade linux-image-powerpcUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-serverUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-restricted-modules-2.6.15-25-amd64-xeonUpgrade linux-image-powerpc64-smpUpgrade nvidia-glx-legacy-devUpgrade linux-amd64-k8-smpUpgrade linux-686Upgrade nvidia-glxUpgrade linux-power3-smpUpgrade linux-image-power3Upgrade linux-image-2.6.15-25-amd64-k8Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-powerpc-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.15-25-386Upgrade linux-restricted-modules-2.6.15-25-amd64-k8Upgrade linux-restricted-modules-amd64-xeonUpgrade linux-k7Upgrade linux-source-2.6.10Upgrade linux-restricted-modules-2.6.15-25-amd64-genericUpgrade linux-image-2.6.15-25-powerpc64-smpUpgrade linux-image-2.6.15-25-amd64-xeonUpgrade linux-image-2.6.12-10-amd64-generic | Nov 8, 2024 | Apr 10, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub