CVE-2010-2960

HIGH

Linux Kernel < 2.6.35.4 - Denial of Service via KEYCTL_SESSION_TO_PARENT NULL Pointer Dereference

Title source: llm

Description

The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.

References (11)

Core 11

Core References

Third Party Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1000-1

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2010/09/02/1

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/61557

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/42932

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html

Broken Link vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0298

Broken Link third-party-advisory x_refsource_secunia

http://secunia.com/advisories/41263

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00003.html

Third Party Advisory x_refsource_misc

http://twitter.com/taviso/statuses/22777866582

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1024384

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=627440

Scores

CVSS v3 7.8

EPSS 0.0010

EPSS Percentile 27.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-476

Status published

Products (9)

canonical/ubuntu_linux 6.06

canonical/ubuntu_linux 8.04

canonical/ubuntu_linux 9.04

canonical/ubuntu_linux 9.10

canonical/ubuntu_linux 10.04

canonical/ubuntu_linux 10.10

linux/linux_kernel < 2.6.35.4

suse/suse_linux_enterprise_desktop 11 sp1

suse/suse_linux_enterprise_server 11 sp1

Published Sep 08, 2010

Tracked Since Feb 18, 2026