Published: 21/01/2009 Updated: 13/02/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and previous versions allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 2.6.25.4
linux linux kernel 2.6.25.11
linux linux kernel 2.6.18
linux linux kernel 2.6.25.9
linux linux kernel 2.6.22.15
linux linux kernel 2.6.24.7
linux linux kernel 2.6.23.13
linux linux kernel 2.6.24.2
linux linux kernel 2.4.36.6
linux linux kernel 2.6.26.5
linux linux kernel 2.6.22.21
linux linux kernel 2.6.25.12
linux linux kernel 2.6.25.5
linux linux kernel 2.6.23.8
linux linux kernel 2.6.25
linux linux kernel 2.6.22.12
linux linux kernel 2.6.25.8
linux linux kernel 2.6.21.6
linux linux kernel 2.4.36.2
linux linux kernel 2.6.22.1
linux linux kernel 2.6.23.16
linux linux kernel 2.6.24.1
linux linux kernel 2.6.25.6
linux linux kernel 2.6.22
linux linux kernel 2.6.26
linux linux kernel 2.6.26.3
linux linux kernel 2.6.20.16
linux linux kernel 2.6.27
linux linux kernel 2.6.19.4
linux linux kernel 2.6.25.13
linux linux kernel 2.6.20.21
linux linux kernel 2.6.25.7
linux linux kernel 2.4.36.1
linux linux kernel
linux linux kernel 2.6.25.3
linux linux kernel 2.6.24
linux linux kernel 2.6.26.2
linux linux kernel 2.6.20.17
linux linux kernel 2.6.21.5
linux linux kernel 2.6.25.15
linux linux kernel 2.6.24_rc4
linux linux kernel 2.6.23.15
linux linux kernel 2.6.23.10
linux linux kernel 2.4.36.4
linux linux kernel 2.6.26.1
linux linux kernel 2.6.20.20
linux linux kernel 2.6.22.18
linux linux kernel 2.4.36.3
linux linux kernel 2.6.22.20
linux linux kernel 2.6.20.18
linux linux kernel 2.6.23.9
linux linux kernel 2.6.25.2
linux linux kernel 2.6.25.1
linux linux kernel 2.6.24.4
linux linux kernel 2.6.25.16
linux linux kernel 2.6.22.9
linux linux kernel 2.6.25.17
linux linux kernel 2.6.22.13
linux linux kernel 2.6.19.7
linux linux kernel 2.6.24.5
linux linux kernel 2.6.24_rc1
linux linux kernel 2.6.20.19
linux linux kernel 2.6.22.17
linux linux kernel 2.6.25.10
linux linux kernel 2.6.22.11
linux linux kernel 2.6.23
linux linux kernel 2.6.22.10
linux linux kernel 2.6.23.17
linux linux kernel 2.6.21.7
linux linux kernel 2.6.23_rc1
linux linux kernel 2.6.22.22
linux linux kernel 2.6.24.6
linux linux kernel 2.6.22_rc7
linux linux kernel 2.4.36
linux linux kernel 2.6.23.12
linux linux kernel 2.6.24_rc5
linux linux kernel 2.6.19.6
linux linux kernel 2.6.22.8
linux linux kernel 2.6.19.5
linux linux kernel 2.4.36.5
linux linux kernel 2.6.22.2
linux linux kernel 2.2.27
linux linux kernel 2.6.22.19
linux linux kernel 2.6.24.3
linux linux kernel 2.6.22_rc1
linux linux kernel 2.6.25.14
linux linux kernel 2.6.26.4
linux linux kernel 2.6.23.11
linux linux kernel 2.6.28
linux linux kernel 2.6.22.14
linux linux kernel 2.6

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having important security impact by the RedHat Security Response Team ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that resolve several security issues and fixvarious bugs are now available for Red Hat Enterprise Linux 4This update has been rated as having important security impact by the RedH ...

NFS did not correctly handle races between fcntl and interrupts A local attacker on an NFS mount could consume unlimited kernel memory, leading to a denial of service Ubuntu 810 was not affected (CVE-2008-4307) ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0029 Christian Borntraeger discovered an issue effecting the alpha, mips, powerpc, s390 and sparc64 architectures that al ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-4307 Bryn M Reeves reported a denial of service in the NFS filesystem Local users can trigger a kernel BUG() due to a r ...

CWE-399 http://www.openwall.com/lists/oss-security/2009/01/19/4 http://osvdb.org/51501 http://secunia.com/advisories/33858 http://rhn.redhat.com/errata/RHSA-2009-0264.html http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html http://secunia.com/advisories/34252 http://www.redhat.com/support/errata/RHSA-2009-0331.html http://www.debian.org/security/2009/dsa-1749 http://www.redhat.com/support/errata/RHSA-2009-0360.html http://secunia.com/advisories/34394 http://secunia.com/advisories/34502 http://www.ubuntu.com/usn/usn-751-1 http://secunia.com/advisories/34762 http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm http://secunia.com/advisories/34981 http://www.debian.org/security/2009/dsa-1787 http://www.debian.org/security/2009/dsa-1794 http://secunia.com/advisories/35011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386 http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc https://access.redhat.com/errata/RHSA-2009:0264 https://nvd.nist.gov https://usn.ubuntu.com/751-1/

CVE-2009-0031

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect