The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Dec 20, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo | Jan 30, 2018 | Dec 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headers | Jan 22, 2018 | Dec 20, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 12, 2019 | Dec 8, 2017 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 1, 2020 | Dec 20, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-3.13.0-144-lowlatencyUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-144-genericUpgrade linux-image-3.13.0-144-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-144-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-3.13.0-144-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-144-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-144-powerpc64-smpUpgrade linux-image-3.13.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04 | Apr 25, 2018 | Dec 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub