NVD

Id
28094  
Name
CVE-2015-7550  
Description
The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-02-07  
Modified Date
2016-12-05  
Seq
2015-7550  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147598 28094 CVE-2015-7550 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b4a1b4f5047e4f54e194681125c74c0aa64d637d  View
147599 28094 CVE-2015-7550 SUSE-SU-2016:0911  View
147600 28094 CVE-2015-7550 SUSE-SU-2016:1102  View
147601 28094 CVE-2015-7550 SUSE-SU-2016:2074  View
147602 28094 CVE-2015-7550 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.3.4  View
147603 28094 CVE-2015-7550 79903  View
147604 28094 CVE-2015-7550 USN-2888-1  View
147605 28094 CVE-2015-7550 USN-2890-1  View
147606 28094 CVE-2015-7550 USN-2890-2  View
147607 28094 CVE-2015-7550 USN-2890-3  View
147608 28094 CVE-2015-7550 USN-2911-1  View
147609 28094 CVE-2015-7550 USN-2911-2  View
147610 28094 CVE-2015-7550 https://bugzilla.redhat.com/show_bug.cgi?id=1291197  View
147611 28094 CVE-2015-7550 https://github.com/torvalds/linux/commit/b4a1b4f5047e4f54e194681125c74c0aa64d637d  View
147612 28094 CVE-2015-7550 https://security-tracker.debian.org/tracker/CVE-2015-7550  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11600 JVNDB-2015-006920 Linux Kernel の security/keys/keyctl.c の keyctl_read_key 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の security/keys/keyctl.c の keyctl_read_key 関数は、セマフォを適切に使用しないため、サービス運用妨害 (NULL ポインタデリファレンスおよびシステムクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-7550 84775 CVE-2015-7550 28094 4.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006920.html 2015-12-18 2016-03-02 View