NetSight
IP …
medium6.9

CVE-2014-9529

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (mem…

Impact

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.67
from 3.3 before 3.4.107
from 3.5 before 3.10.67
from 3.11 through 3.12.37
from 3.13 through 3.14.31
from 3.15 before 3.16.35
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.6, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Eus
Versions 6.6, 7.1, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
OpensuseOpensuse
Version 13.1
FedoraprojectFedora
Versions 20, 21
DebianDebian Linux
Versions 7.0, 8.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10

Weakness classification

CWE-362

References