Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | |||
| kernel-0:2.6.9-42.EL | cpe:/o:redhat:enterprise_linux:4 | RHSA-2006:0575 | 2006-08-10T00:00:00Z |
No data.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2006-0464 | Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory. |
 Ubuntu USN |
USN-263-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T16:34:14.828Z
Reserved: 2006-01-27T00:00:00
Link: CVE-2006-0457
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2006-03-14T02:02:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2006-0457
Redhat
OpenCVE Enrichment
No data.
Weaknesses