Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel安全键函数本地向用户复制比赛漏洞
Vulnerability Description
Linux kernel 2.6.x的(1) add_key，(2) request_key，和(3) keyctl函数中的竞态条件，可以让本地用户通过以下途径制造一个拒绝服务(崩溃)或读取敏感内核内存：修改一个介于内核计算长度时间和当其将数据复制到内核内存时之间的字符串参数的长度。
CVSS Information
N/A
Vulnerability Type
N/A