11 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000800)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000800 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003307)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003307 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...
K55672042: Linux kernel vulnerability CVE-2016-4470
Security Advisory Description The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2...
kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path
A flaw was found in the Linux kernel's keyring handling code: the keyrejectandlink function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation...
SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2245-1)
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-3955: The usbiprecvxbuff function in drivers/usb/usbip/usbipcommon.c in the Linux kernel allowed remote attackers to cause a denial of service...
SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2018-1)
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-5829: Multiple heap-based buffer overflows in the hiddevioctlusage function in drivers/hid/usbhid/hiddev.c in the Linux kernel allowed local users to...
Updated kernel-tmb packages fix security vulnerabilities
This update is based on the upstream 4.4.16 kernel and fixes at least theese security issues: nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. CVE-2016-1237. The...
kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path
A flaw was found in the Linux kernel's keyring handling code: the keyrejectandlink function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation...
DEBIAN-CVE-2016-4470
The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...
CVE-2016-4470
The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...
Linux kernel 'key_reject_and_link()' denial of service vulnerability
Linux kernel is an open source operating system. The 'keyrejectandlink' function in the Linux kernel fails to properly initialize variables, allowing a local attacker to exploit the vulnerability with a use-after-release attack to crash the system...