linux linux-kernel CVE-2010-1437 vulnerability in Linux and Other Products
Published on May 7, 2010

product logo product logo product logo product logo
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.

Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2010-1437

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2010-1437 are published in these products:

 
 
 
 
 
 

Exploit Probability

EPSS
0.24%
Percentile
47.21%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.