PT-2015-4270 · Linux+5 · Linux Kernel+5
Publicado
2015-01-09
·
Atualizado
2024-03-14
·
CVE-2014-9529
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 3.18.2
Description
A race condition in the key gc unused keys function allows local users to cause a denial of service, potentially resulting in memory corruption or panic, via keyctl commands that trigger access to a key structure member during garbage collection of a key.
Recommendations
For Linux kernel versions through 3.18.2, consider restricting access to keyctl commands until a patch is available.
As a temporary workaround, avoid using the keyctl commands that trigger access to a key structure member during garbage collection of a key.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu