Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-firmwareUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade perfUpgrade kernel-toolsUpgrade kernel-doc | Dec 1, 2016 | Jan 9, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 9, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jan 9, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jan 9, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-77-generic-paeUpgrade linux-image-3.16.0-31-powerpc-e500mcUpgrade linux-image-3.13.0-46-powerpc-smpUpgrade linux-image-3.2.0-77-omapUpgrade linux-image-3.13.0-46-powerpc64-smpUpgrade linux-image-3.16.0-31-generic-lpaeUpgrade linux-image-3.16.0-31-powerpc64-embUpgrade linux-image-3.2.0-77-genericUpgrade linux-image-2.6.32-73-genericUpgrade linux-image-3.13.0-46-genericUpgrade linux-image-3.2.0-77-powerpc-smpUpgrade linux-image-3.2.0-77-powerpc64-smpUpgrade linux-image-3.13.0-46-lowlatencyUpgrade linux-image-3.16.0-31-genericUpgrade linux-image-2.6.32-73-virtualUpgrade linux-image-2.6.32-73-serverUpgrade linux-image-2.6.32-73-sparc64-smpUpgrade linux-image-3.2.0-77-virtualUpgrade linux-image-2.6.32-73-preemptUpgrade linux-image-2.6.32-73-ia64Upgrade linux-image-3.13.0-46-powerpc64-embUpgrade linux-image-2.6.32-73-powerpc-smpUpgrade linux-image-2.6.32-73-powerpc64-smpUpgrade linux-image-3.16.0-31-powerpc-smpUpgrade linux-image-2.6.32-73-lpiaUpgrade linux-image-2.6.32-376-ec2Upgrade linux-image-3.16.0-31-powerpc64-smpUpgrade linux-image-3.16.0-31-lowlatencyUpgrade linux-image-3.13.0-46-powerpc-e500mcUpgrade linux-image-3.13.0-46-generic-lpaeUpgrade linux-image-3.2.0-77-highbankUpgrade linux-image-3.2.0-1460-omap4Upgrade linux-image-2.6.32-73-generic-paeUpgrade linux-image-2.6.32-73-versatileUpgrade linux-image-2.6.32-73-sparc64Upgrade linux-image-2.6.32-73-386Upgrade linux-image-2.6.32-73-powerpcUpgrade linux-image-3.13.0-46-powerpc-e500 | Nov 8, 2024 | Jan 9, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub