The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 1, 2020 | Dec 20, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Jan 30, 2018 | Dec 20, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Jan 22, 2018 | Dec 20, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 12, 2019 | Dec 8, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 1, 2020 | Dec 20, 2017 |
| Ubuntu | — | Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-144-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-3.13.0-144-powerpc64-smpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-144-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-144-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-3.13.0-144-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-144-powerpc64-embUpgrade linux-image-3.13.0-144-genericUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-144-powerpc-e500Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-1016-raspi2 | Apr 25, 2018 | Dec 20, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub