NetSight
IP …
medium4.6

CVE-2009-3624

The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the ref…

Impact

The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.

Affected products

VendorProductAffected versions
LinuxKernel
Versions 2.6.24.7, 2.6.25.15
LinuxLinux Kernel
through 2.6.32
Versions 2.6, 2.6.0, 2.6.1, 2.6.2, 2.6.2.27.13

Weakness classification

CWE-310

References