VULNERABILITY INTELLIGENCE
CVE-2010-2960
CVSS score7.8 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2010-09-08
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.
Weakness classification
- CWE-476: NULL Pointer Dereference
Primary references
- security@ubuntu.com — Mailing List, Third Party Advisory
- security@ubuntu.com — Mailing List, Third Party Advisory
- security@ubuntu.com — Broken Link
- security@ubuntu.com — Third Party Advisory, VDB Entry
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Mailing List, Third Party Advisory
- security@ubuntu.com — Third Party Advisory, VDB Entry
- security@ubuntu.com — Third Party Advisory
- security@ubuntu.com — Broken Link
- security@ubuntu.com — Exploit, Issue Tracking, Patch, Third Party Advisory
- security@ubuntu.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory