The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2018 | Apr 28, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Apr 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Dec 4, 2019 | May 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headers | Nov 19, 2019 | May 11, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 27, 2018 | Apr 1, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 26, 2018 | Apr 28, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-extra | Jan 4, 2018 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-79-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1018-aws | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub