kernel: security/keys: fix slab-out-of-bounds in key_task_permission

A flaw was found in the Linux kernel's key management subsystem. A local user can trigger this vulnerability by adding multiple keys with specific hash patterns, causing the kernel to misinterpret internal tree pointers during a nested keyring search. This issue leads to an out-of-bounds memory...

PT-2024-10024

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0-14930-gafbffd6c3ede Description The issue is related to a slab-out-of-bounds read in the key task permission function. This can be caused by a mistake in the search nested keyrings function when it iterate...