CVE-2006-1522

Published: Apr 10, 2006Modified: Apr 16, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, allows local users to cause a denial of service (OOPS) via keyctl requests that add a key to a user key instead of a keyring key, which causes an invalid dereference in the __keyring_search_one function.

Affected (2)

Products: Linux: Linux Kernel

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6.16.1
Linux Linux Kernel	Version 2.6.17 rc1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (40)

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.3

Source: secalert@redhat.com

http://lwn.net/Alerts/180820/

Source: secalert@redhat.com

http://secunia.com/advisories/19573

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/19735

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20157

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20237

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20716

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21745

Source: secalert@redhat.com

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

Source: secalert@redhat.com

Vendor Advisory

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c3a9d6541f84ac3ff566982d08389b87c1c36b4e

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:086

Source: secalert@redhat.com

http://www.osvdb.org/24507

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0493.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/17451

Source: secalert@redhat.com

Patch

http://www.ubuntu.com/usn/usn-302-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/1307

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2006/1475

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188466

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25722

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9325

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.3

Source: af854a3a-2127-422b-91ae-364da2661108

http://lwn.net/Alerts/180820/

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19573

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19735

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20157

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20237

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/20716

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/21745

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c3a9d6541f84ac3ff566982d08389b87c1c36b4e

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2006:086

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/24507

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2006-0493.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17451

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/usn-302-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1307

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/1475

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188466

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/25722

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9325

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.