Lucene search
K

30 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001093 advisory. The joinsessionkeyring function in security/keys/processkeys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows...

7.8CVSS7.1AI score0.03646EPSS
Exploits14References45
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001073 advisory. The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, whi...

5.2CVSS6.9AI score0.0055EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003307 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...

5.5CVSS6.4AI score0.00587EPSS
Exploits0References51
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003484)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003484 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...

5.5CVSS6.4AI score0.00587EPSS
Exploits0References51
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002264)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002264 advisory. The joinsessionkeyring function in security/keys/processkeys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows...

7.8CVSS7.2AI score0.03646EPSS
Exploits14References45
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002002)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002002 advisory. The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, whi...

5.2CVSS6.9AI score0.0055EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-7872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The keygcunusedkeys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service OOPS via crafted keyctl...

2.1CVSS6AI score0.00508EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.55 views

K55672042: Linux kernel vulnerability CVE-2016-4470

Security Advisory Description The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2...

5.5CVSS6AI score0.00587EPSS
Exploits0Affected Software24
SUSE CVE
SUSE CVE
added 2023/02/15 5:32 a.m.1 views

SUSE CVE-2014-0102

The keyringdetectcycleiterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service OOPS via crafted keyctl commands...

5.2CVSS6.2AI score0.0055EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:9 a.m.3 views

SUSE CVE-2016-0728

The joinsessionkeyring function in security/keys/processkeys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service integer overflow and use-after-free via crafted keyctl commands...

7.8CVSS6.9AI score0.03646EPSS
Exploits14References23
Veracode
Veracode
added 2019/01/15 9:20 a.m.32 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service BUG via crafted keyctl commands that negatively instantiate a key, related to...

7.8CVSS7.1AI score0.00427EPSS
Exploits0References27Affected Software1
OSV
OSV
added 2017/10/12 12:29 a.m.1 views

DEBIAN-CVE-2017-12192

The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service OOPS and system crash via a crafted...

5.5CVSS5.4AI score0.00453EPSS
Exploits0References1
OSV
OSV
added 2017/10/11 12:0 a.m.0 views

UBUNTU-CVE-2017-12192

The keyctlreadkey function in security/keys/keyctl.c in the Key Management subcomponent in the Linux kernel before 4.13.5 does not properly consider that a key may be possessed but negatively instantiated, which allows local users to cause a denial of service OOPS and system crash via a crafted...

5.5CVSS6.7AI score0.00453EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2016/10/24 12:0 a.m.77 views

F5 Networks BIG-IP : Linux kernel vulnerability (K55672042)

The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command. CVE-2016-4470 C Tenable...

5.5CVSS6.5AI score0.00587EPSS
Exploits0References3
VulnCheck KEV
VulnCheck KEV
added 2016/08/04 12:0 a.m.4 views

VulnCheck KEV: CVE-2016-0728

The joinsessionkeyring function in security/keys/processkeys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service integer overflow and use-after-free via crafted keyctl commands...

7.8CVSS6.9AI score0.03646EPSS
Exploits14References1
Cvelist
Cvelist
added 2016/06/27 10:0 a.m.23 views

CVE-2016-4470

The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...

6AI score0.00587EPSS
Exploits0References48
UbuntuCve
UbuntuCve
added 2016/06/27 12:0 a.m.49 views

CVE-2016-4470

The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...

5.5CVSS6.8AI score0.00587EPSS
Exploits0References11
OSV
OSV
added 2016/02/08 3:59 a.m.1 views

DEBIAN-CVE-2016-0728

The joinsessionkeyring function in security/keys/processkeys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service integer overflow and use-after-free via crafted keyctl commands...

7.8CVSS6.2AI score0.03646EPSS
Exploits14References1
Cvelist
Cvelist
added 2016/02/08 2:0 a.m.29 views

CVE-2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service BUG via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/userdefined.c...

7.3AI score0.00427EPSS
Exploits0References24
UbuntuCve
UbuntuCve
added 2016/02/07 12:0 a.m.41 views

CVE-2015-8539

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service BUG via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/userdefined.c...

7.8CVSS6.8AI score0.00427EPSS
Exploits0References5
Rows per page
Query Builder