NetSight
medium4.9

CVE-2009-0031

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of…

Impact

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.28.1
Versions 2.2.27, 2.4.36, 2.4.36.1, 2.4.36.2, 2.4.36.3

Weakness classification

References