CVE-2009-0031

Linux kernel <2.6.29-rc2 - DoS

Title source: llm

Description

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

References (20)

[Various Sources] http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html

[Third Party Advisory, VDB Entry] http://osvdb.org/51501

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2009-0264.html

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2009-0331.html

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2009-0360.html

[Vendor Advisory] http://www.ubuntu.com/usn/usn-751-1

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1749

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1787

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1794

[Mailing List] http://www.openwall.com/lists/oss-security/2009/01/19/4

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386

[Third Party Advisory] http://secunia.com/advisories/33858

[Third Party Advisory] http://secunia.com/advisories/34252

[Third Party Advisory] http://secunia.com/advisories/34394

[Third Party Advisory] http://secunia.com/advisories/34502

[Third Party Advisory] http://secunia.com/advisories/34762

[Third Party Advisory] http://secunia.com/advisories/34981

[Third Party Advisory] http://secunia.com/advisories/35011

Scores

EPSS 0.0010

EPSS Percentile 27.8%

Classification

CWE

CWE-399

Status draft

Affected Products (50)

linux/linux_kernel < 2.6.28.1

linux/linux_kernel

... and 35 more

Timeline

Published Jan 21, 2009

Tracked Since Feb 18, 2026