Vulnetix
Try Vulnetix Request Demo
CVE-2010-2960 PUBLISHED CVSS 7.800000190734863 HIGH

The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.

EPSS 0.10% · 27.7th percentile

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.10%
27.7th percentile

Affected Products

VendorProductVersions
susesuse_linux_enterprise_server11
linuxlinux_kernel0
canonicalubuntu_linux8.04, 9.04, 10.04
n/an/an/a
susesuse_linux_enterprise_desktop11

Timeline

References

Open in Interactive Console →