Null pointer dereference

2010-09-0820:00:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.

CPENameOperatorVersion
ubuntu_linuxeq10.10
ubuntu_linuxeq9.04
ubuntu_linuxeq9.10
ubuntu_linuxeq10.04
ubuntu_linuxeq8.04
ubuntu_linuxeq6.06
linux_kernellt2.6.35.4
suse_linux_enterprise_desktopeq11 sp1
suse_linux_enterprise_servereq11 sp1

Name	Operator	Version
ubuntu_linux	eq	10.10
ubuntu_linux	eq	9.04
ubuntu_linux	eq	9.10
ubuntu_linux	eq	10.04
ubuntu_linux	eq	8.04
ubuntu_linux	eq	6.06
linux_kernel	lt	2.6.35.4
suse_linux_enterprise_desktop	eq	11 sp1
suse_linux_enterprise_server	eq	11 sp1