CVE-2010-1437: Debian Linux

High severity, CVSS 7.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via keyctl session commands that trigger access to a dead keyring that is undergoing deletion by the key_cleanup function.

Affected products

• Debian Debian Linux: version 5.0 only
• Linux Linux Kernel: before 2.6.34 (fixed in 2.6.34); version 2.6.34 only
• Opensuse Opensuse: version 11.1 only
• Suse Linux Enterprise Desktop: version 11 only
• Suse Linux Enterprise High Availability Extension: version 11 only
• Suse Linux Enterprise Server: version 11 only

Published 2010-05-07. Last modified 2026-06-16.