Linux Kernel Keyring Destruction Error Lets Local Users Deny Service
|
|
SecurityTracker Alert ID: 1014644
|
|
SecurityTracker URL: http://securitytracker.com/id?1014644
|
|
CVE Reference: CVE-2005-2099
(Links to External Site)
|
Updated: Jun 8 2008
|
Original Entry Date: Aug 10 2005
|
Impact: Denial of service via local system
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): prior to 2.6.13-rc6
|
Description: A vulnerability was reported in the Linux kernel in the processing of keyrings. A local user may be able to cause the system to crash.
A local user can attempt to add a keyring in a manner that will cause the keyring instantiation function to fail. The system will then attempt to remove the keyring from the name list, causing the system to crash.
|
Impact: A local user can cause the target system to crash.
|
Solution: The vendor has issued a fixed version (2.6.13-rc6), available at:
http://kernel.org/
Red Hat has issued a fix for Red Hat Enterprise Linux 4:
https://rhn.redhat.com/errata/RHSA-2005-514.html
|
Vendor URL: www.kernel.org/ (Links to External Site)
|
Cause: State error
|
Underlying OS: Linux (Caldera/SCO), Linux (Conectiva), Linux (Debian), Linux (EnGarde), Linux (Gentoo), Linux (HP Secure OS), Linux (Immunix), Linux (Mandriva/Mandrake), Linux (Progeny Debian), Linux (Red Hat Enterprise), Linux (Red Hat Fedora), Linux (Red Hat Linux), Linux (SGI), Linux (Slackware), Linux (Sun), Linux (SuSE), Linux (Trustix), Linux (Turbo Linux), Linux (Ubuntu), Linux (Xandros)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Tue, 9 Aug 2005 23:51:51 -0400
Subject: http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.13-rc6
|
> The attached patch makes sure that a keyring that failed to instantiate
> properly is destroyed without oopsing [CAN-2005-2099].
|
|
