CVE-2011-2184

The keyreplacesessionkeyring function in security/keys/processkeys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified other impact via a...

CVE-2011-2184

The keyreplacesessionkeyring function in security/keys/processkeys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified other impact via a...

Linux Kernel "key_replace_session_keyring()"空指针引用拒绝服务漏洞

Linux是一款开放源代码的操作系统。 security/keys/processkeys.c提供的"keyreplacesessionkeyring"函数存在错误，使用syscallNRkeyctl, KEYCTLSESSIONTOPARENT可导致空指针应用而使内核崩溃。 Linux Kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...