CVE-2011-2184
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel...
CVE-2011-2184 is a high vulnerability (CVSS 7.2) in Linux Kernel, published September 6, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
Exploit likelihood
What each source reports
NVD Score used
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
- Record
CVE-2011-2184- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
- Record
CVE-2011-2184- Updated
- 2026-11-02
EUVDEUVD-2011-2176 No score
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
- Record
EUVD-2011-2176- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2wh9-jjcg-cw3f No score
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel...
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
- Record
GHSA-2wh9-jjcg-cw3f- Weakness
- CWE-476
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-2184 No score
The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function, a different vulnerability than CVE-2010-2960.
- Record
UBUNTU-CVE-2011-2184- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected, facts | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
alt.swiecki.net/linux_kernel/sys_open-kmem_cache_alloc-2.6.39-rc4.txt
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f7285b5d631fd6096b11c6af0058ed3a2b30ef4e
openwall.com/lists/oss-security/2011/06/03/2
lkml.org/lkml/2011/5/24/502
Show 8 moreShow less
securityreason.com/securityalert/8371
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.1
nvd.nist.gov/vuln/detail/CVE-2011-2184
github.com/advisories/GHSA-2wh9-jjcg-cw3f
ubuntu.com/security/CVE-2011-2184
cve.org/CVERecord?id=CVE-2011-2184