The copy_creds function in kernel/cred.c in the Linux kernel before 3.3.2 provides an invalid replacement session keyring to a child process, which allows local users to cause a denial of service (panic) via a crafted application that uses the fork system call.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-doc | Dec 1, 2016 | Aug 9, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 9, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 9, 2012 |
| Suse | — | Upgrade kernel-xenUpgrade xen-kmp-defaultUpgrade hyper-v-kmp-traceUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-trace-extraUpgrade kernel-xen-extraUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-default-develUpgrade btrfs-kmp-paeUpgrade kernel-ppc64-develUpgrade ext4dev-kmp-xenUpgrade kernel-ppc64Upgrade kernel-sourceUpgrade hyper-v-kmp-paeUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade xen-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-ec2-develUpgrade kernel-trace-baseUpgrade ext4dev-kmp-traceUpgrade kernel-defaultUpgrade ext4dev-kmp-paeUpgrade kernel-trace-develUpgrade kernel-pae-extraUpgrade kernel-symsUpgrade kernel-docsUpgrade ext4dev-kmp-defaultUpgrade xen-kmp-traceUpgrade btrfs-kmp-defaultUpgrade kernel-default-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-24-powerpc-smpUpgrade linux-image-2.6.38-16-serverUpgrade linux-image-3.2.0-24-omapUpgrade linux-image-2.6.32-44-powerpcUpgrade linux-image-3.0.0-20-powerpc64-smpUpgrade linux-image-3.2.0-24-generic-paeUpgrade linux-image-2.6.38-16-genericUpgrade linux-image-2.6.32-44-powerpc64-smpUpgrade linux-image-2.6.32-44-genericUpgrade linux-image-3.0.0-20-powerpc-smpUpgrade linux-image-3.0.0-20-serverUpgrade linux-image-2.6.32-44-serverUpgrade linux-image-2.6.32-44-versatileUpgrade linux-image-2.6.32-44-lpiaUpgrade linux-image-2.6.32-44-generic-paeUpgrade linux-image-2.6.38-16-virtualUpgrade linux-image-3.0.0-1210-omap4Upgrade linux-image-3.2.0-24-powerpc64-smpUpgrade linux-image-2.6.38-16-powerpcUpgrade linux-image-2.6.32-44-ia64Upgrade linux-image-3.2.0-24-virtualUpgrade linux-image-2.6.32-44-powerpc-smpUpgrade linux-image-3.0.0-20-genericUpgrade linux-image-2.6.32-44-386Upgrade linux-image-2.6.38-16-powerpc-smpUpgrade linux-image-3.2.0-24-genericUpgrade linux-image-2.6.32-44-sparc64-smpUpgrade linux-image-3.0.0-20-generic-paeUpgrade linux-image-2.6.38-16-versatileUpgrade linux-image-3.2.0-1413-omap4Upgrade linux-image-2.6.32-44-preemptUpgrade linux-image-2.6.38-16-omapUpgrade linux-image-3.0.0-20-powerpcUpgrade linux-image-2.6.32-349-ec2Upgrade linux-image-3.0.0-20-virtualUpgrade linux-image-3.0.0-20-omapUpgrade linux-image-2.6.32-44-virtualUpgrade linux-image-2.6.38-16-generic-paeUpgrade linux-image-2.6.32-44-sparc64Upgrade linux-image-2.6.38-16-powerpc64-smp | Nov 8, 2024 | Aug 9, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub