Description
Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.2.41-1 | — |
| Debian 13 | linux | 3.2.41-1 | — |
| Debian 12 | linux | 3.2.41-1 | — |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze3 | DSA-2668-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-358.6.1.el6 | RHSA-2013:0744 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 2 | kernel-rt +11 | 3.6.11.2-rt33.39.el6rt | RHSA-2013:0829 |
Advisories 3
- RHSA-2013:0829 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:0744 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-2668-1 linux-2.6 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- USN-1796-1 vendor-advisory
- openSUSE-SU-2013:1187 vendor-advisory
- https://github.com/torvalds/linux/commit/0da9dfdd2cd9889201bc6f6f43580c99165cd087
- MDVSA-2013:176 vendor-advisory
- USN-1797-1 vendor-advisory
- USN-1788-1 vendor-advisory
- [oss-security] 20130307 CVE-2013-1792 Linux kernel: KEYS: race with concurrent install_user_keyrings() mailing-list
- USN-1793-1 vendor-advisory
- USN-1792-1 vendor-advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0da9dfdd2cd9889201bc6f6f43580c99165cd087
- https://bugzilla.redhat.com/show_bug.cgi?id=916646
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3
- USN-1794-1 vendor-advisory
- RHSA-2013:0744 vendor-advisory
- USN-1795-1 vendor-advisory
- USN-1787-1 vendor-advisory
- openSUSE-SU-2014:0204 vendor-advisory
- USN-1798-1 vendor-advisory