CVE-2009-0031

kernel: local denial of service in keyctl_join_session_keyring

Published Jan 21, 2009 CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Description
Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1749-1 New Linux 2.6.26 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1787-1 New Linux 2.6.24 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1794-1 New Linux 2.6.18 packages fix several vulnerabilities
EUVD EUVD EUVD-2009-0043 Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."
Ubuntu USN Ubuntu USN USN-751-1 Linux kernel vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 4:17 AM
Reserved
Dec 15, 2008, 12:00 AM
Status
Modified
Published
Jan 21, 2009, 2:30 AM
Modified
Jun 16, 2026, 11:04 PM
Severity
Important
Public date
Jan 17, 2009, 12:00 AM