CVE-2014-0102
published 2014-03-11CVE-2014-0102: The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are…
PriorityP419medium5.2CVSS 2.0
AVAACMAuSCNINAC
EPSS
0.56%
43.3th percentile
The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 3.13.6-1 (bookworm) | linux 3.13.6-1 (bookworm) |
| linux | linux_kernel | <= 3.13.6 | — |
| linux | linux_kernel | >= 0 < 3.13.6-1 | 3.13.6-1 |
| linux | linux_kernel | >= 0 < 3.13.6-1 | 3.13.6-1 |
| linux | linux_kernel | >= 0 < 3.13.6-1 | 3.13.6-1 |
| linux | linux_kernel | >= 0 < 3.13.6-1 | 3.13.6-1 |
CVSS provenance
nvdv2.05.2MEDIUMAV:A/AC:M/Au:S/C:N/I:N/A:C
osv5.2MEDIUM
vendor_debian5.2MEDIUM
vendor_redhat5.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: security: keyring cycle detector DoS
vendor_redhat·2014-02-28·CVSS 5.2
CVE-2014-0102 [MEDIUM] kernel: security: keyring cycle detector DoS
kernel: security: keyring cycle detector DoS
The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
Statement: This issue did not affect the versions of Linux kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 as they did not backport the commit that introduced this issue.
Package: kernel (Red Hat Enterprise Linux 5) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: realtime-kernel (Red Hat Enterprise MRG 2) - Not affected
Debian
CVE-2014-0102: linux - The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Lin...
vendor_debian·2014·CVSS 5.2
CVE-2014-0102 [MEDIUM] CVE-2014-0102: linux - The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Lin...
The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
Scope: local
bookworm: resolved (fixed in 3.13.6-1)
bullseye: resolved (fixed in 3.13.6-1)
forky: resolved (fixed in 3.13.6-1)
sid: resolved (fixed in 3.13.6-1)
trixie: resolved (fixed in 3.13.6-1)
GHSA
GHSA-q97q-xjqf-jw5m: The keyring_detect_cycle_iterator function in security/keys/keyring
ghsa_unreviewed·2022-05-13
CVE-2014-0102 [MEDIUM] GHSA-q97q-xjqf-jw5m: The keyring_detect_cycle_iterator function in security/keys/keyring
The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
OSV
CVE-2014-0102: The keyring_detect_cycle_iterator function in security/keys/keyring
osv·2014-03-11·CVSS 5.2
CVE-2014-0102 [MEDIUM] CVE-2014-0102: The keyring_detect_cycle_iterator function in security/keys/keyring
The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause a denial of service (OOPS) via crafted keyctl commands.
Kernel
KEYS: Make the keyring cycle detector ignore other keyrings of the same name
kernel_security·2014-03-09·CVSS 5.2
CVE-2014-0102 [MEDIUM] KEYS: Make the keyring cycle detector ignore other keyrings of the same name
KEYS: Make the keyring cycle detector ignore other keyrings of the same name
This fixes CVE-2014-0102.
The following command sequence produces an oops:
keyctl new_session
i=`keyctl newring _ses @s`
keyctl link @s $i
The problem is that search_nested_keyrings() sees two keyrings that have
matching type and description, so keyring_compare_object() returns true.
s_n_k() then passes the key to the iterator function -
keyring_detect_cycle_iterator() - which *should* check to see whether this is
the keyring of interest, not just one with the same name.
Because assoc_array_find() will return one and only one match, I assumed that
the iterator function would only see an exact match or never be called - but
the iterator isn't only called from assoc_array_find()...
The oops looks something lik
No detection rules found.
No public exploits indexed.
http://lkml.org/lkml/2014/2/27/507http://www.kernelhub.org/?msg=425013&p=2http://www.openwall.com/lists/oss-security/2014/03/04/21https://bugzilla.redhat.com/show_bug.cgi?id=1072419http://lkml.org/lkml/2014/2/27/507http://www.kernelhub.org/?msg=425013&p=2http://www.openwall.com/lists/oss-security/2014/03/04/21https://bugzilla.redhat.com/show_bug.cgi?id=1072419
2014-03-11
Published