2009-11-02 16:30:00 2012-03-19 05:00:00

The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.

Vector

LOCAL

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
HP H3C Switch S5100-24P-EI - model LS-5100-24P-EI-OVS HP H3C Switch S3610-52P - model LS-3610-52P-OVS HP H3C Switch S5100-16P-EI - model LS-5100-16P-EI-OVS-H3 HP H3C Switch S5100-16P-PWR-EI - model LS-5100-16P-PWR-EI-OVS HP H3C Switch S5100-16P-SI - model LS-5100-16P-SI-OVS-H3 HP Color LaserJet 9500 Multifunction Printer (MFP) C8549A HP Color LaserJet 9500 MFP HP Color LaserJet 9500 HP color laserjet 8550 printer HP color laserjet 8500 printer HP Bastille B.02.00.05 HP Bastille HP Aserver HP Array Diagnostics Utility 9.40 HP Autonomy Ultraseek 6.0 HP Autonomy Ultraseek 5.0 HP Color LaserJet CP2025 Printer CB494A HP Color LaserJet CP1518 CC378A HP Color LaserJet CM2320n Multifunction Printer CC434A HP Business Process Monitor Patch 1 9.3 HP Color LaserJet CM1312nfi Multifunction Printer CC431A HP Business Availability Center (BAC) 7.55 Linux Linux kernel 2.6.25 X86 64 (not an official CPE) HP Color Laserjet Cp1210 Series Toolbox 1.0.21 HP Color LaserJet CM6040 Multifunction Printer (MFP) Q3939A HP Color LaserJet CM6030 Multifunctin Printer (MFP) CE664A HP Centralized Management Console (CMC) software 7.0.01 SP1 HP Care Pack Products 1.0.0.1 Linux Linux kernel 2.6.29 Rc8-kk (not an official CPE) Linux Linux kernel 2.6.2.27.13 (not an official CPE) HP Color LaserJet 3000 Q7534A HP H3C Router RT-MSR3040-AC-POE-OVS-H3 cpe:/h:HP:AdvanceStack 10Base-T Switching Hub J3204A HP Alm-platform Loader 11.0.5844.0 HP Bufferchm 130.0.331.0 HP Bufferchm 120.0.194.0 HP Document Viewer 53.0.13.0 HP H3C Switch S3100-16T-SI - model LS-S3100-16T-SI-AC-OVS HP Document Viewer 5.3 HP H3C Switch S3100-26C-SI - model LS-S3100-26C-SI-AC-OVS HP Bidi Channel Components Installer 1.1.0.2 HP H3C Switch S3100-16C-SI - model LS-S3100-16C-SI-AC-OVS HP H3C Switch S3100-16C-SI - model LS-S3100-16C-SI-DC-OVS HP H3C Switch S3100-52P - model LS-3100-52P-OVS-H3 HP H3C Switch S3100-26C-SI - model LS-S3100-26C-SI-DC-OVS HP Document Viewer 7.0 HP H3C Switch S3100-26T-SI - model LS-S3100-26T-SI-AC-OVS HP Icewall MCRP 3.0 HP IceWall SSO Agent 10.0 Enterprise for Windows HP IceWall SSO Agent Option 8.0 HP Bpdsoftware 140.0.0.0 HP Ignite-UX A.3.6 HP IceWall SSO Agent 8.0 Enterprise HP Bpdsoftware Ini 1.0.0 HP IceWall SSO Agent 8.0 Release 3 Standard HP Bpdsoftware 82.0.173.0 HP Bufferchm 110.0.180.0 HP Bufferchm 100.0.170.0 HP Cio Components Installer 3.2.1 (x64) 64-bit HP Document Manager 120.0.0.0 HP Cio Components Installer 3.1.1 HP Document Manager 100.0.201.0 HP Cio Components Installer 2.2.4 (x64) 64-bit HP Directories Support for ProLiant Management Processors 3.30 HP Diagnostics Server 9.20 HP Document Viewer 45.4.157.0 HP Document Manager 2.0 hp deskjet 694c (inital release) HP H3C Switch Model S12518 HP Deskjet Single Function Software 90.0.200.0 Linux Linux kernel 2.6.29 Git1 (not an official CPE) HP H3C Routing Switch Model S9512E HP designjet 5500 printer HP designjet 755 printer HP Cio Components Installer 4.1.1 HP Deskjet 3820 Color Inkjet (initial release) HP Cio Components Installer 4.2.1 (x64) 64-bit HP deskjet 5850 printer hp deskjet 1220c (initial release) HP Deskjet 3420 Color Inkjet (initial release) HP Carrier Grade Server cc2300 A6899A HP Carrier Grade Server cc2300 A6898A HP Creativeprojects Panorama1config 70.0.170.0 HP Carrier Grade Server cc2300 HP Care Pack Products 2.0.0.1 HP Creativeprojects Posterprintconfig 70.0.170.0 HP Creativeprojects Plsbusinessflyers 45.4.157.0 HP Cuetour 45.4.157.0 HP Creativeprojects Templates 45.4.157.0 HP Cuetour 70.0.170.0 HP Cuetour 53.0.13.0 HP Destination Component 110.0.0.0 HP Destination Component 100.0.0.0 HP DESMS HP Deskjet Taplugin 60.0.196.0 HP Deskjet Single Function Software Req 90.0.200.0 HP designjet 500ps printer HP CentralView Fraud Risk Management 11.1 HP CentralView Dealer Performance Audit 2.0 HP CentralView Dealer Performance Audit 2.1 HP CentralView Credit Risk Control 2.2 HP Destinations 130.0.0.0 HP CentralView Credit Risk Control 2.3 HP Destination Component 90.0.91.86 HP Centralized Management Console (CMC) software 8.5 HP Centralized Management Console (CMC) software 8.1 HP CentralView Credit Risk Control 2.1 HP Centralized Management Console (CMC) software 9.0 HP Centralized Management Console (CMC) software 8.0 Linux Linux kernel 2.6.16.31 -rc1 (not an official CPE) Linux Linux kernel 2.6.16.31 -rc5 (not an official CPE) Linux Linux kernel 2.6.16.31 -rc4 (not an official CPE) Linux Linux kernel 2.6.16.31 -rc3 (not an official CPE) Linux Linux kernel 2.6.16.31 -rc2 (not an official CPE) Linux Linux kernel 2.6.28 Git7 (not an official CPE) HP CentralView Roaming Fraud Control 2.3 HP CentralView Subscription Fraud Prevention 2.0 HP CentralView Subscription Fraud Prevention 2.1 HP ChaiVM HP Business Availability Center (BAC) 8.01 HP Business Availability Center (BAC) 8.0 HP C7100 Help 70.0.231.0 HP Cards Calendar Ordergift Domoreplugout 1.0.0 HP Destinations 140.0.77.0 HP C4380 Help 100.0.206.0 HP C6100 Help 70.0.231.0 HP Care Pack Products 1.0.0.0 HP Care Pack Core 1.0.0.0 HP Care Pack Core 10.0.0.1 HP Business Process Monitor 9.3.170 HP C4100 Help 70.0.231.0 HP Button Manager 1.6.0.0 HP Carrier Grade Server cc3300 HP Carrier Grade Server cc3300 A6900A HP Carrier Grade Server cc3300 A6901A HP Carrier Grade Server cc3310 HP Carrier Grade Server cc3310 A9862A HP Carrier Grade Server cc3310 A9863A HP Cio Components Installer 7.2.4 (x64) 64-bit HP Cio Components Installer 7.2.5 (x64) 64-bit HP Cio Components Installer 7.1.5 HP Cio Components Installer 7.1.7 HP Cio Components Installer 6.2.2 (x64) 64-bit HP Cio Components Installer 7.1.4 HP CentralView Fraud Risk Management 11.2 HP CIFS_9000 Server HP CIFS_9000 Server A.01.08 HP CIFS_9000 Server A.01.08.01 HP CIFS_9000 Server A.01.09 HP Business Availability Center (BAC) 8.07 HP Business Availability Center (BAC) 8.06 HP Business Process Monitor 8.4.316 HP Business Availability Center (BAC) 9.01 HP Business Availability Center (BAC) 8.03 HP Business Availability Center (BAC) 8.02 HP Business Availability Center (BAC) 8.05 HP Business Availability Center (BAC) 8.04 HP ArcSight Logger 5.2 HP ArcSight Enterprise Security Manager (ESM) 5.2 HP ArcSight Logger 6.0 HP ArcSight Logger 5.3 HP ArcSight Logger Appliance Firmware 5.2.0.6288.0 HP ArcSight Logger Appliance Model L7400-SAN HP Customer Participation Program 14.0 HP Cio Components Installer 6.1.1 HP Cio Components Installer 6.1.2 HP Customer Participation Program 10.0 HP Customer Participation Program 12.0 Linux Linux kernel 2.6.30 Rc4 X86 32 (not an official CPE) HP Cio Components Installer 2.1.6 HP H3C Switch S3600-52P-PWR-EI - model LS-3600-52P-PWR-EI-OVS HP D4100 Help 70.0.260.0 HP Customer Participation Program 8.0 HP Customer Participation Program 9.0 Linux Linux kernel 2.6.25.2 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.1 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.4 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.6 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.3 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.5 X86 64 (not an official CPE) HP Array Configuration Utility 8.50.5.0 HP Array Configuration Utility 8.70.9.0 HP Array Configuration Utility 8.60.7.0 HP Array Configuration Utility 9.40 HP Array Configuration Utility 8.75.12.0 HP H3C Router MSR 50-60 HP Ignite-UX A.3.5 HP H3C Router MSR5040-DC-OVS-H3C HP H3C Router MSR 920 HP H3C Router Model SR20-12 W HP Client Automation Satellite 7.80.0 HP Enterprise 50.0.165.0 HP Cluster Object Manager HP Enterprise 47.0.1.0 HP H3C Switch S3100-8C-SI - model LS-S3100-8C-SI-AC-OVS HP E/a Agent Spanish Localization 8.60.7 HP Employee Expense Management System 3.5 HP Easy Tools 3.0.1 HP Device Discovery 140.0.213.0 HP Device Discovery 90.0.146.0 HP Device Discovery 90.0.205.0 HP Diagnostics Server 8.00 HP Device Discovery 140.0.212.0 HP Diagnostics Server 8.01 HP Diagnostics Server 8.02 HP color laserjet 4600 toolbox HP Color LaserJet CP5225 Series CE712A HP Creativeprojects Dwshrek2albums1 45.4.157.0 HP Data Protector Media Operations 6.10 HP Apache-Based Web Server 1.3.27.00 HP ArcSight Connector Appliance Model C1400 HP ALM Synchronizer 1.40 Linux Linux kernel 2.6.29 Rc2 git7 (not an official CPE) HP H3C Router Model RT-MSR2013-AC-OVS-W-H3 HP H3C Router MSR 30-20 POE HP Eprint And Share 1.1.0 HP Document Viewer 70.0.170.0 HP Diagnostics Server 8.03 HP Destinations 45.4.157.0 HP Color Laserjet Cp4520-cp4020 Series Screen Fonts 2.0.0.0 HP Color Laserjet Cp4520-cp4020 Series User Guide 1.0.0.0 HP Color LaserJet CP5225 Series CE710A HP Color LaserJet CP5225 Series CE711A HP Color LaserJet CP1515 CC377A HP Color LaserJet CP3505 CB442A HP Color LaserJet CP3525 CC469A HP Color LaserJet CP4005 CB503A HP Array Configuration Utility 7.80.6.0 HP Array Diagnostic Utility 7.80.6.0 HP Bidi Channel Components Installer 1.2.0.2 (x64) 64-bit HP Bufferchm 45.4.157.0 HP CIFS_9000 Server A.01.09.01 HP Cio Components Installer 8.1.1 HP Cluster Object Manager B.03.00.01 HP color laserjet 2500lse HP color laserjet 2500n HP color laserjet 2500tn HP Color Laserjet 2550 (initial release) HP color laserjet 2500 toolbox HP color laserjet 2500l HP Color LaserJet 5550 Q3714A HP H3C Router MSR 900 HP Application Lifecycle Management (ALM) 11.50 HP Application Lifecycle Management (ALM) 11.51 HP Application Lifecycle Management (ALM) HP Application Lifecycle Management (ALM) 11.00 HP Application Information Optimizer 6.4 HP Application Information Optimizer 7.0 HP Apollo Domain OS SR10.3 HP HP Application Server HP HP Application Server 8.0 HP Cluster Object Manager B.01.04 HP Enterprise 50.0.227.0 HP Cluster Object Manager A.01.03 HP Enterprise Maps 1.00 HP Cluster Object Manager B.02.02.00 HP Enterprise Npi 70.0.200.0 HP Cluster Object Manager B.02.01.02 HP Cluster Object Manager B.03.00.00 HP Cluster Object Manager B.02.02.02 HP color laserjet 2500 Linux Linux kernel 2.6.29.rc2 (not an official CPE) Linux Linux kernel 2.6.29.rc1 (not an official CPE) HP Cio Components Installer 8.2.1 (x64) 64-bit HP CentralView Revenue Leakage Control 4.3 HP Cio Components Installer 8.1.2 HP CentralView Revenue Leakage Control 4.2 HP Cio Components Installer 8.2.4 (x64) 64-bit HP CentralView Roaming Fraud Control 2.2 HP Cio Components Installer 8.2.2 (x64) 64-bit HP CentralView Roaming Fraud Control 2.1 HP Client Automation Application Manager Agent 7.80 HP Client Automation Administrator 7.80 HP CentralView Revenue Leakage Control 4.1 HP Event Monitoring Services (EMS) A.04.20.31.07 HP Client Automation Core 7.80.0 HP CentralView Fraud Risk Management 11.3 HP Fax 82.0.188.0 HP Graphical POS Pole Display QZ704AA HP H3C Ethernet Switch Model S5600-26C HP H3C Router MSR 30-10 HP eSupportDiagnostics 1.0.11 .0 HP H3C Router MSR 30-40 POE HP Destinations 53.0.24.0 HP DynRootDisk A.1.0.18.245 HP eSupportDiagnostics HP Destinations 82.0.173.0 HP Event Monitoring Services (EMS) A.04.20.11.05 HP H3C Router MSR 30-20 RTVZ33020AS HP H3C Router RT-MSR3016-AC-OVS-H3 HP H3C Router Model RT-MSR2015-AC-OVS-AW-H3 HP Event Monitoring Services (EMS) A.04.20.11.04_01 HP H3C Router MSR 30-60 HP H3C Router RT-MSR3016-AC-POE-OVS-H3 HP H3C Router Model RT-MSR2015-AC-OVS-A-H3 HP CIFS_9000 Server A.01.07 HP Event Monitoring Services (EMS) A.04.20.11.04 HP H3C Router MSR 30-16 HP CIFS_9000 Server A.01.06 HP eva 5000 HP H3C Router Model MSR 30-40 HP CIFS_9000 Server A.01.05 HP H3C Router MSR 30-60 POE HP Event Monitoring Services (EMS) A.04.20.23.06 HP Database and Middleware Automation 10.0 HP Destinations 60.0.155.0 HP Data Protector Media Operations 6.11 HP Destinations 53.0.13.0 HP EVA 3000 Array Control Software HP Destinations 70.0.170.0 HP eva 3000 HP Network Printer CP1700 HP Network Printer CP1160 HP Creativeprojects Atenashokunin1config 45.4.131.0 HP Creativeprojects 45.4.157.0 HP Creativeprojects Calendartemplates1 53.0.13.0 HP Creativeprojects Atenashokunin1config 53.0.13.0 HP Creativeprojects Calendartemplates1 70.0.170.0 HP Fax 120.0.194.0 HP H3C Router Model MSR 20-40 HP Fax 100.0.272.0 HP H3C Router MSR 30-10 HP Fax 100.0.187.0 HP H3C Router Model MSR 30-20 HP Extended Capabilities 6.0 HP Fax 50.0.206.0 HP Fax 47.0.1.0 HP Fax 140.0.213.0 HP H3C MSR 50 High Performance Main Processing Unit 3GE HP Fax 140.0.212.0 HP H3C Router Model MSR 20-15 A W HP App Studio 140.0.95.0 HP H3C Router RT-MSR3040-AC-OVS-AS-H3 HP H3C Router Model RT-MSR3040-AC-OVS-H HP Application Information Optimizer 6.3 HP H3C Router Model RT-MSR3020-AC-POE-OVS-H3 HP Application Information Optimizer 6.2 HP H3C Router Model RT-MSR3020-DC-OVS-H3 HP Fortify Software Security Center 3.4 HP Fortify Software Security Center 3.3 HP HP FTP Print Server HP Fortify Software Security Center 3.5 HP HP FTP Print Server 2.4.5 HP HP FTP Print Server 2.4 HP Gpbaseservice 100.0.187.0 HP Executive Scorecard 9.40 HP Executive Scorecard 9.41 HP H3C Ethernet Switch Model S5500-52C-EI HP H3C Ethernet Switch Model S5500-52C-PWR-EI HP H3C Ethernet Switch Model S5500-28C-SI HP H3C Ethernet Switch Model S5500-28F-EI HP Document Manager 1.0 Linux Linux kernel 2.6 (not an official CPE) HP Fortify Software Security Center 3.1 HP Fax Cda 71.0.215.0 HP Fax Cda 70.0.231.0 Linux Linux kernel 2.6.25.10 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.11 X86 64 (not an official CPE) Linux Linux kernel 2.6.25.12 X86 64 (not an official CPE) HP H3C Ethernet Switch Model S5500-28C-EI-DC HP H3C Ethernet Switch Model S5500-28C-EI HP H3C Ethernet Switch Model S5500-28C-PWR-SI HP H3C Ethernet Switch Model S5500-28C-PWR-EI HP H3C Switch S3600-28TP-SI - model LS-3600-28TP-SI-OVS HP H3C Switch S3600-28P-PWR-EI - model LS-3600-28P-PWR-EI-OVS HP H3C Switch S3100-8T-SI - model LS-S3100-8T-SI-AC-OVS HP Directories Support for ProLiant Management Processors 3.10 HP H3C Routing Switch Model S12508 HP H3C Switch S3600-28P-SI - model LS-3600-28P-SI-OVS HP H3C Routing Switch Model S12518 HP Directories Support for ProLiant Management Processors 3.20 HP H3C Switch S5100-48P-SI - model LS-5100-48P-SI-OVS-H3 HP H3C Switch S3600-28P-EI - model LS-3600-28P-EI-OVS HP H3C Switch S3100-8C-SI - model LS-S3100-8C-SI-DC-OVS HP H3C Switch S5100-50C-EI - model LS-5100-50C-EI-OVS HP H3C Router Model SR8802 HP H3C Switch S5100-50C-PWR-EI - model LS-5100-50C-PWR-EI-OVS HP H3C Switch S3600-28F-EI - model LS-3600-28F-EI-OVS HP H3C Router Model SR8805 HP digital sender 9100c HP Digital Sender 9200C HP Diagnostics Server 9.21 HP digital sender 8100c HP Digital Sending Software 4.91.21 HP Director 45.4.157.0 HP H3C Switch S3610-52P - model LS-3610-52P-OVS HP Digital Sender 9250C CB472A HP Digital Sending Software 4.10.5 HP H3C Router Model RT-MSR2011-AC-OVS-H3 Linux Linux kernel 2.6.30 Rc7-git6 (not an official CPE) HP H3C Router Model RT-MSR2012-AC-OVS-H3 HP H3C Router Model RT-MSR2012-AC-OVS-W-H3 HP H3C Router RT-MSR2012-AC-OVS-W-H3 HP H3C Router Model RT-MSR2012-T-AC-OVS-H3 HP H3C Router Model RT-MSR2013-AC-OVS-H3 HP H3C Router Model SR8808 HP Data Protector 6.11 Linux Linux kernel 2.6.25.8 X86 64 (not an official CPE) HP Data Protector Express 5.0 HP Data Protector Express 6.0 HP Data Protector Media Operations 5.0 HP Creativeprojects Panorama1config 53.0.13.0 Linux Linux kernel 2.6.25.9 X86 64 (not an official CPE) HP Customer Participation Program 7.0 HP Data Protector 6.10 Linux Linux kernel 2.6.25.7 X86 64 (not an official CPE) HP Data Protector Media Operations 5.1 HP Data Protector Media Operations 5.5