CVE-2015-7550 in Kernel
要約 (英語)
The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
予約する
2015年09月29日
公開
2016年02月07日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 80795 | Linux Kernel keyctl.c keyctl_read_key 競合状態 | 362 | 未定義 | 公式な修正 | CVE-2015-7550 |