Summary
Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted
to garbage collect incompletely instantiated keys. A local unprivileged
attacker could use this to cause a denial of service (system crash).
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux-lts-utopic | 3.16.0-55.74~14.04.1 |
Vulnerabilities 1
-
Unscored —
The key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a d…
References
-
report
https://ubuntu.com/security/CVE-2015-7872