CVE-2010-1437

Publication date 7 May 2010

Last updated 25 August 2025

Ubuntu priority

Low

Why this priority?

Cvss 3 Severity Score

7.0 · High

Score breakdown

Description

Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.

Status

Package Ubuntu Release Status
linux 10.04 LTS lucid
Fixed 2.6.32-24.39
9.10 karmic
Fixed 2.6.31-22.61
9.04 jaunty
Fixed 2.6.28-19.62
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy
Fixed 2.6.24-28.73
6.06 LTS dapper Not in release
linux-source-2.6.15 10.04 LTS lucid Not in release
9.10 karmic Not in release
9.04 jaunty Not in release
8.10 intrepid Not in release
8.04 LTS hardy Not in release
6.06 LTS dapper
Fixed 2.6.15-55.86

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
linux
linux-source-2.6.15

Severity score breakdown

CVSS version: CVSS v3.0

Base score 7.0 · High

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Related Ubuntu Security Notices (USN)

    • USN-966-1
    • Linux kernel vulnerabilities
    • 4 August 2010

Other references

Access our resources on patching vulnerabilities