CVE-2014-3631

The assoc_array_gc function in the associative-array implementation in
lib/assoc_array.c in the Linux kernel before 3.16.3 does not properly
implement garbage collection, which allows local users to cause a denial of
service (NULL pointer dereference and system crash) or possibly have
unspecified other impact via multiple “keyctl newring” operations followed
by a “keyctl timeout” operation.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3631&gt;
• <https://launchpad.net/bugs/1370041&gt;

Notes