Linux kernel key description reads freed module memory
The Linux kernel can freeze or crash.
Summary
The Linux kernel's key description path does not protect a key type's name, so after the AF_RXRPC module is unloaded it can read freed memory. This can cause a kernel page fault, and a local process that can view keys is involved. Systems with AF_RXRPC built as a module are affected.
Affected when
- Kernel with AF_RXRPC built as a module (=m)
- Key lookup overlapping with key type retirement
What to do
Update to the fixed kernel for your branch listed below. If your branch is not listed, check your distribution's security advisory.
Update to at least the version for your product:
- Linux 5.10 5.10.273 or later
- Linux 5.15 5.15.224 or later
- Linux 6.1 6.1.191 or later
- Linux 6.6 6.6.161 or later
- Linux 6.12 6.12.115 or later
- Linux 6.18 6.18.60 or later
- Linux 7.2 7.2.14 or later
- Linux 7.3 7.3.1 or later
Products and platforms
CVE IDs
Times
First published
First seen