QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2010-1437

Back to search

CVE-2010-1437

Published: May 7, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SA:2010:031
vendor-advisory
x_refsource_SUSE
oval:org.mitre.oval:def:9715
vdb-entry
signature
x_refsource_OVAL
RHSA-2010:0474
vendor-advisory
x_refsource_REDHAT
40645
third-party-advisory
x_refsource_SECUNIA
43315
third-party-advisory
x_refsource_SECUNIA
40218
third-party-advisory
x_refsource_SECUNIA
DSA-2053
vendor-advisory
x_refsource_DEBIAN
39719
vdb-entry
x_refsource_BID
39830
third-party-advisory
x_refsource_SECUNIA
ADV-2010-1857
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now