CVE-2013-1792

Published: Mar 22, 2013Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.

Affected (3)

Products: Linux: Linux Kernel

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.8.2
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (36)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0da9dfdd2cd9889201bc6f6f43580c99165cd087

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0744.html

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/03/07/1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1787-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1788-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1792-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1793-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1794-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1795-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1796-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1797-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1798-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=916646

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/0da9dfdd2cd9889201bc6f6f43580c99165cd087

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0da9dfdd2cd9889201bc6f6f43580c99165cd087

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0744.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/03/07/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1787-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1788-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1792-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1793-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1794-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1795-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1796-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1797-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1798-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=916646

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/0da9dfdd2cd9889201bc6f6f43580c99165cd087

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.