Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Sep 20, 2017 | Aug 31, 2015 |
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debug-devel | Dec 1, 2016 | Aug 31, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 31, 2015 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-build | Dec 18, 2015 | Aug 31, 2015 |
| Ubuntu | — | Upgrade linux-image-3.13.0-59-powerpc64-embUpgrade linux-image-3.19.0-25-generic-lpaeUpgrade linux-image-3.19.0-25-powerpc-smpUpgrade linux-image-3.13.0-59-powerpc64-smpUpgrade linux-image-3.13.0-59-lowlatencyUpgrade linux-image-3.16.0-45-powerpc64-smpUpgrade linux-image-3.19.0-25-powerpc64-embUpgrade linux-image-3.16.0-45-lowlatencyUpgrade linux-image-3.13.0-59-powerpc-e500mcUpgrade linux-image-3.13.0-59-genericUpgrade linux-image-3.19.0-25-lowlatencyUpgrade linux-image-3.16.0-45-generic-lpaeUpgrade linux-image-3.19.0-25-genericUpgrade linux-image-3.19.0-25-powerpc-e500mcUpgrade linux-image-3.16.0-45-powerpc-smpUpgrade linux-image-3.19.0-25-powerpc64-smpUpgrade linux-image-3.13.0-59-powerpc-e500Upgrade linux-image-3.13.0-59-powerpc-smpUpgrade linux-image-3.13.0-59-generic-lpaeUpgrade linux-image-3.16.0-45-powerpc-e500mcUpgrade linux-image-3.16.0-45-powerpc64-embUpgrade linux-image-3.16.0-45-generic | Nov 8, 2024 | Aug 31, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub