PT-2005-3040
CVE-2005-2099
·
Published
2005-08-22
·
Updated
2018-10-19
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 2.6.12.5
Description:
The issue allows local users or remote attackers to cause a denial of service (kernel oops) via a keyring with a payload that is not empty. This happens because the kernel does not properly destroy a keyring that is not instantiated properly, leading to a null dereference in the keyring destructor.
Recommendations:
For Linux kernel versions prior to 2.6.12.5, update to version 2.6.12.5 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾