Bug 386419

Summary:	Kernel: key_replace_session_keyring(): Denial of Service (CVE-2011-2184)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	RESOLVED OBSOLETE
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	[noglsa]
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2011-10-08 17:29:41 UTC

CVE-2011-2184 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2184):
  The key_replace_session_keyring function in security/keys/process_keys.c in
  the Linux kernel before 2.6.39.1 does not initialize a certain structure
  member, which allows local users to cause a denial of service (NULL pointer
  dereference and OOPS) or possibly have unspecified other impact via a
  KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different
  vulnerability than CVE-2010-2960.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-08-29 19:40:07 UTC

No longer in Portage.