CVE-2016-0728

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which…

published February 8, 2016

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03442 · 88.9th percentile
Published
2016-02-08T02:00Z
EPSS history
Timeline
  • 08 FEB 02:00Z
    The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which…
    cvelistv5