PT-2005-3039 · Linux+1 · Linux Kernel+1

David Howells

·

Published

2005-08-22

·

Updated

2018-10-19

·

CVE-2005-2098

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.12.5
Description: The issue is related to the KEYCTL JOIN SESSION KEYRING operation in the Linux kernel, which contains an error path that does not properly release the session management semaphore. This allows local users or remote attackers to cause a denial of service (semaphore hang) via a new session keyring under certain conditions, such as an empty name string, a long name string, when the key quota is reached, or when an ENOMEM error occurs.
Recommendations: For Linux kernel versions prior to 2.6.12.5, update to version 2.6.12.5 or later to resolve the issue.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2005-2098
RHSA-2005:514
RHSA-2005_514

Affected Products

Linux Kernel
Red Hat