CVE-2011-2184 json
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain…
published 2011-09-06 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2176
- cvss
- 7.2
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 32%
- public exploits
- 0
- none known
Summary
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
Patch / fix
- linux linux_kernel 2.6.39.1
- openwall.com/lists/oss-security/2011/06/03/2 advisory
- lkml.org/lkml/2011/5/25/265 advisory
- securityreason.com/securityalert/8371 advisory
- openwall.com/lists/oss-security/2011/06/06/2 advisory
Exploit prediction
0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-476 NULL Pointer Dereference
- Technology feeds
References
-
openwall.com
/lists/oss-security/2011/06/03/2
mailing-list, patch, third-party-advisory
-
lkml.org
/lkml/2011/5/25/265
mailing-list, patch, third-party-advisory
-
securityreason.com
/securityalert/8371
third-party-advisory, patch
-
openwall.com
/lists/oss-security/2011/06/06/2
mailing-list, patch, third-party-advisory
-
alt.swiecki.net
/linux_kernel/sys_open-kmem_cache_alloc-2.6.39-rc4.txt
broken-link
- git.kernel.org /?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f7285b5d631fd6096b11c6af0058ed3a2b30ef4e
-
lkml.org
/lkml/2011/5/24/502
mailing-list, third-party-advisory
-
lkml.org
/lkml/2011/5/23/199
mailing-list, third-party-advisory
-
kernel.org
/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1
broken-link
Sources
- CVE List CVE-2011-2184
- NVD CVE-2011-2184
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.