CVE-2005-2098

security flaw

Published Aug 22, 2005 CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Description
The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2005-2099 The KEYCTL_JOIN_SESSION_KEYRING operation in the Linux kernel before 2.6.12.5 contains an error path that does not properly release the session management semaphore, which allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring (1) with an empty name string, (2) with a long name string, (3) with the key quota reached, or (4) ENOMEM.
Ubuntu USN Ubuntu USN USN-169-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 10:15 PM
Reserved
Jun 30, 2005, 12:00 AM
Status
Modified
Published
Aug 23, 2005, 4:00 AM
Modified
Jun 16, 2026, 10:14 PM
Severity
Important
Public date
Aug 4, 2005, 12:00 AM