NetSight
IP …
medium5.5

CVE-2016-4470

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which a…

Impact

The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command.

Affected products

VendorProductAffected versions
OracleVm Server
Versions 3.3, 3.4
OracleLinux
Versions 5.0, 6, 7
LinuxLinux Kernel
through 4.6.3
NovellSuse Linux Enterprise Real Time Extension
Version 12.0
RedhatEnterprise Linux
Version 6.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux For Real Time
Version 7.0
RedhatEnterprise Linux Hpc Node
Version 7.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Version 7.2
RedhatEnterprise Linux Server Eus
Version 7.2

References