The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 27, 2018 | Apr 28, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | May 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Nov 19, 2019 | May 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Apr 1, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 26, 2018 | Apr 28, 2017 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-extra | Jan 4, 2018 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-4.4.0-1059-snapdragon | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub