Linux Kernel 2.6.34 – ‘find_keyring_by_name()’ Local Memory Corruption
source: https://www.securityfocus.com/bid/39719/info The Linux kernel is prone to a local memory-corruption vulnerability. Attackers can exploit this issue to crash the affected computer, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed. kernel 2.6.34-rc5 is vulnerable. The following proof-of-concept is available: for ((i=0; i<100000; i++)); do keyctl session wibble /bin/true || break; done |