VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 22, 2013· Updated Apr 29, 2026

CVE-2013-1792

CVE-2013-1792

Description

Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads.

Affected products

3
  • Linux/Kernel3 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=3.8.2
    • cpe:2.3:o:linux:linux_kernel:3.8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:3.8.1:*:*:*:*:*:*:*

Patches

1
0da9dfdd2cd9
https://github.com/torvalds/linuxvia osv
commit

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

17

News mentions

0

No linked articles in our index yet.