CVEs-PoC/2015/CVE-2015-7550.md

CVE-2015-7550

Description

The keyctl_read_key function in security/keys/keyctl.c in the Linux kernel before 4.3.4 does not properly use a semaphore, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted application that leverages a race condition between keyctl_revoke and keyctl_read calls.

POC

Reference

• http://www.ubuntu.com/usn/USN-2890-3

Github

• https://github.com/wcventure/PERIOD