Candidate: CVE-2009-0031 PublicDate: 2009-01-21 02:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0031 https://ubuntu.com/security/notices/USN-751-1 Description: Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree." Ubuntu-Description: The kernel keyring did not free memory correctly. A local attacker could consume unlimited kernel memory, leading to a denial of service. Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_linux-source-2.6.15: upstream_linux-source-2.6.15: needs-triage dapper_linux-source-2.6.15: not-affected gutsy_linux-source-2.6.15: DNE hardy_linux-source-2.6.15: DNE intrepid_linux-source-2.6.15: DNE jaunty_linux-source-2.6.15: DNE devel_linux-source-2.6.15: DNE Patches_linux-source-2.6.22: upstream_linux-source-2.6.22: needs-triage dapper_linux-source-2.6.22: DNE gutsy_linux-source-2.6.22: released (2.6.22-16.62) hardy_linux-source-2.6.22: DNE intrepid_linux-source-2.6.22: DNE jaunty_linux-source-2.6.22: DNE devel_linux-source-2.6.22: DNE Patches_linux: upstream_linux: needs-triage dapper_linux: DNE gutsy_linux: DNE hardy_linux: released (2.6.24-23.52) intrepid_linux: released (2.6.27-11.31) jaunty_linux: not-affected devel_linux: not-affected