The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-vanilla-baseUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-xenUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-desktop-baseUpgrade kernel-pae-baseUpgrade preload-kmp-desktopUpgrade kernel-paeUpgrade kernel-debug-baseUpgrade kernel-pae-develUpgrade preload-kmp-defaultUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade kernel-desktop-devel | Feb 17, 2015 | Nov 2, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.24-26-powerpc-smpUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.28-17-serverUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.24-26-386 | Nov 8, 2024 | Nov 2, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub