PT-2005-3040 · Linux+1 · Linux Kernel+1

David Howells

·

Published

2005-08-22

·

Updated

2018-10-19

·

CVE-2005-2099

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.12.5
Description: The issue allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty. This happens because the kernel does not properly destroy a keyring that is not instantiated properly, leading to a null dereference in the keyring destructor.
Recommendations: For Linux kernel versions prior to 2.6.12.5, update to version 2.6.12.5 or later to resolve the issue.

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2005-2099
RHSA-2005:514
RHSA-2005_514

Affected Products

Linux Kernel
Red Hat