Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux kernel 'keyctl_session_to_parent'函数空指针应用错误漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux kernel 2.6.35.4以及早期版本中的security/keys/keyctl.c文件中的keyctl_session_to_parent函数认为存在某个父会话的密钥环,本地用户可以借助keyctl函数中的KEYCTL_SESSION_TO_PARENT参数调用导致拒绝服务(空指针解引用和系统崩溃),也可能引起其他未明影响。
CVSS Information
N/A
Vulnerability Type
N/A