Race condition vulnerability in key_gc_unused_keys function in Linux kernel through 3.18.2 allows local users to cause denial of service or other impact via keyctl commands.

CVE-2014-9529 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.