CVE-2006-0457

security flaw

Published Mar 14, 2006 CVSS 2.0 · 7.1 High EPSS 2.7% KEV · Not listed
Description
Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-0464 Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
Ubuntu USN Ubuntu USN USN-263-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 4:34 PM
Reserved
Jan 27, 2006, 12:00 AM
Status
Modified
Published
Mar 14, 2006, 2:02 AM
Modified
Jun 16, 2026, 10:20 PM
Severity
Important
Public date
Feb 3, 2006, 12:00 AM