CVE-2010-1437

kernel: keyrings: find_keyring_by_name() can gain the freed keyring

Published May 7, 2010 CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Description
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2053-1 New Linux 2.6.26 packages fix several issues
Ubuntu USN Ubuntu USN USN-966-1 Linux kernel vulnerabilities
History

No history.