The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2018 | Feb 7, 2016 |
| Oracle_linux | — | Upgrade kernel | Jan 27, 2018 | Dec 9, 2015 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 26, 2018 | Feb 7, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade gfs2-kmp-default | Feb 7, 2016 | Jan 19, 2016 |
| Ubuntu | — | Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-161-lowlatencyUpgrade linux-image-genericUpgrade linux-image-3.13.0-161-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-161-generic-lpaeUpgrade linux-image-3.13.0-161-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-161-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-161-powerpc-e500Upgrade linux-image-3.13.0-161-powerpc64-smpUpgrade linux-image-3.13.0-161-powerpc-e500mcUpgrade linux-image-highbank | Oct 30, 2018 | Feb 7, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub