CVE-2009-3624 in Linux Kernel

Summary

The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.

Reservation

10/09/2009

Disclosure

11/02/2009

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
50664	Linux Kernel this cryptographic issue	310	Not defined	Not defined	CVE-2009-3624