CVE-2010-2960

No fix known EPSS <1%

The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.

Published 2010-09-08 · CVE record · OSV

Products: linux_kernel, canonical ubuntu_linux, suse_linux_enterprise_desktop, suse_linux_enterprise_server