CVE - CVE-2010-1437

CVE-ID
CVE-2010-1437	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX URL:http://www.securityfocus.com/archive/1/516397/100/0/threaded MISC:39719 URL:http://www.securityfocus.com/bid/39719 MISC:39830 URL:http://secunia.com/advisories/39830 MISC:40218 URL:http://secunia.com/advisories/40218 MISC:40645 URL:http://secunia.com/advisories/40645 MISC:43315 URL:http://secunia.com/advisories/43315 MISC:ADV-2010-1857 URL:~~http://www.vupen.com/english/advisories/2010/1857~~ (Obsolete source) MISC:DSA-2053 URL:http://www.debian.org/security/2010/dsa-2053 MISC:RHSA-2010:0474 URL:http://www.redhat.com/support/errata/RHSA-2010-0474.html MISC:SUSE-SA:2010:031 URL:http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00006.html MISC:[linux-kernel] 20100422 [PATCH 0/1][BUG][IMPORTANT] KEYRINGS: find_keyring_by_name() can gain the freed keyring URL:http://marc.info/?l=linux-kernel&m=127192182917857&w=2 MISC:[linux-kernel] 20100430 [PATCH 2/7] KEYS: find_keyring_by_name() can gain access to a freed keyring URL:http://marc.info/?l=linux-kernel&m=127274294622730&w=2 MISC:[linux-kernel] 20100503 Re: [PATCH 2/7] KEYS: find_keyring_by_name() can gain access to a freed keyring URL:http://marc.info/?l=linux-kernel&m=127292492727029&w=2 MISC:[oss-security] 20100427 CVE request - kernel: find_keyring_by_name() can gain the freed keyring URL:http://www.openwall.com/lists/oss-security/2010/04/27/2 MISC:[oss-security] 20100427 Re: CVE request - kernel: find_keyring_by_name() can gain the freed keyring URL:http://www.openwall.com/lists/oss-security/2010/04/28/2 MISC:http://www.vmware.com/security/advisories/VMSA-2011-0003.html URL:http://www.vmware.com/security/advisories/VMSA-2011-0003.html MISC:https://bugzilla.redhat.com/show_bug.cgi?id=585094 URL:https://bugzilla.redhat.com/show_bug.cgi?id=585094 MISC:https://patchwork.kernel.org/patch/94038/ URL:https://patchwork.kernel.org/patch/94038/ MISC:https://patchwork.kernel.org/patch/94664/ URL:https://patchwork.kernel.org/patch/94664/ MISC:kernel-findkeyringbyname-dos(58254) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/58254 MISC:oval:org.mitre.oval:def:9715 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9715
Assigning CNA
Red Hat, Inc.
Date Record Created
20100415	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100415)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)