The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-tree-2.6.10Upgrade linux-image-2.6.15-25-amd64-k8Upgrade linux-server-bigironUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade nvidia-glx-legacyUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-source-2.6.15Upgrade linux-686Upgrade linux-powerpc64-smpUpgrade linux-image-powerpcUpgrade xorg-driver-fglrx-devUpgrade linux-restricted-modules-2.6.15-25-386Upgrade linux-power3-smpUpgrade linux-image-2.6.15-25-amd64-genericUpgrade linux-amd64-k8-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-386Upgrade linux-686-smpUpgrade linux-image-2.6.15-25-amd64-serverUpgrade linux-source-2.6.10Upgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-powerpc-smpUpgrade linux-amd64-serverUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-power3-smpUpgrade linux-image-server-bigironUpgrade linux-image-2.6.15-25-powerpcUpgrade nvidia-glxUpgrade linux-image-2.6.15-25-powerpc-smpUpgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-power4-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-power3Upgrade linux-restricted-modules-amd64-genericUpgrade linux-image-2.6.15-25-server-bigironUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-386Upgrade linux-image-serverUpgrade linux-image-powerpc64-smpUpgrade linux-restricted-modules-amd64-xeonUpgrade linux-k7Upgrade linux-image-2.6.10-6-power3Upgrade linux-restricted-modules-2.6.15-25-amd64-xeonUpgrade linux-restricted-modules-powerpcUpgrade linux-image-2.6.12-10-386Upgrade linux-amd64-genericUpgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-restricted-modules-powerpc-smpUpgrade linux-restricted-modules-2.6.15-25-powerpc-smpUpgrade linux-image-2.6.15-25-386Upgrade linux-image-2.6.12-10-686Upgrade linux-restricted-modules-2.6.15-25-amd64-k8Upgrade linux-restricted-modules-2.6.15-25-amd64-genericUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-amd64-xeonUpgrade linux-source-2.6.12Upgrade nvidia-glx-devUpgrade nvidia-glx-legacy-devUpgrade linux-restricted-modules-2.6.15-25-686Upgrade avm-fritz-kernel-sourceUpgrade linux-restricted-modules-386Upgrade linux-image-amd64-serverUpgrade linux-image-amd64-k8Upgrade linux-restricted-modules-686Upgrade linux-power4Upgrade avm-fritz-firmware-2.6.15-25Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.15-25-serverUpgrade linux-restricted-modules-2.6.15-25-powerpcUpgrade linux-amd64-k8Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-k7-smpUpgrade linux-image-2.6.15-25-686Upgrade linux-restricted-modules-amd64-k8Upgrade linux-image-power4Upgrade xorg-driver-fglrxUpgrade linux-image-2.6.12-10-k7Upgrade linux-amd64-xeonUpgrade linux-power4-smpUpgrade linux-serverUpgrade fglrx-kernel-sourceUpgrade fglrx-controlUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.15-25-amd64-xeonUpgrade linux-tree-2.6.12Upgrade linux-power3Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-restricted-modules-k7Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-powerpc-smpUpgrade linux-image-amd64-genericUpgrade linux-image-686Upgrade linux-powerpcUpgrade linux-image-k7Upgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.15-25-k7Upgrade linux-image-2.6.15-25-powerpc64-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade avm-fritz-firmwareUpgrade linux-restricted-modules-commonUpgrade linux-restricted-modules-2.6.15-25-k7Upgrade linux-image-386 | Nov 8, 2024 | Apr 10, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub