CVE-2009-3624

kernel: get_instantiation_keyring() should inc the keyring refcount in all cases

View on CVE.org
Published Nov 2, 2009 CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Description
The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-3605 The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.
Ubuntu USN Ubuntu USN USN-864-1 Linux kernel vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 7, 2024, 6:38 AM
Reserved
Oct 9, 2009, 12:00 AM

View source JSON

No data.

Status
Modified
Published
Nov 2, 2009, 3:30 PM
Modified
Jun 16, 2026, 11:12 PM

View source JSON

Severity
Important
Public date
Oct 15, 2009, 12:00 AM

View source Bugzilla JSON

No data.