CWE
310
Advisory Published
Updated

CVE-2009-3624

First published: Mon Nov 02 2009(Updated: )

The get_instantiation_keyring function in security/keys/keyctl.c in the KEYS subsystem in the Linux kernel before 2.6.32-rc5 does not properly maintain the reference count of a keyring, which allows local users to gain privileges or cause a denial of service (OOPS) via vectors involving calls to this function without specifying a keyring by ID, as demonstrated by a series of keyctl request2 and keyctl list commands.

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
Linux Kernel=2.6.27.29
Linux Kernel=2.6.27.12
Linux Kernel=2.6.20.6
Linux Kernel=2.6.28-rc4
Linux Kernel=2.6.25.4
Linux Kernel=2.6.25.11
Linux Kernel=2.6.28-git7
Linux Kernel=2.6.20.9
Linux Kernel=2.6.26-rc4
Linux Kernel=2.6.18-rc3
Linux Kernel=2.6.29-rc8-kk
Linux Kernel=2.6.11
Linux Kernel=2.6.25.9
Linux Kernel=2.6.23.4
Linux Kernel=2.6.22.15
Linux Kernel=2.6.16.16
Linux Kernel=2.6.18.7
Linux Kernel=2.6.17.12
Linux Kernel=2.6.16.39
Linux Kernel=2.6.27.3
Linux Kernel=2.6.31
Linux Kernel=2.6.29.3
Linux Kernel=2.6.21
Linux Kernel=2.6.16.9
Linux Kernel=2.6.31-rc4
Linux Kernel=2.6.17.9
Linux Kernel=2.6.32-rc1
Linux Kernel=2.6.11.2
Linux Kernel=2.6.27.1
Linux Kernel=2.6.5
Linux Kernel=2.6.15.3
Linux Kernel=2.6.27.30
Linux Kernel=2.6.11.10
Linux Kernel=2.6.24.7
Linux Kernel=2.6.1
Linux Kernel=2.6.16.43
Linux Kernel=2.6.16.6
Linux Kernel=2.6.31.3
Linux Kernel=2.6.16.8
Linux Kernel=2.6.20.13
Linux Kernel=2.6.22.4
Linux Kernel=2.6.27.34
Linux Kernel=2.6.14.7
Linux Kernel=2.6.18-rc2
Linux Kernel=2.6.27.18
Linux Kernel=2.6.13
Linux Kernel=2.6.17.2
Linux Kernel=2.6.13.3
Linux Kernel=2.6.23.13
Linux Kernel=2.6.11.8
Linux Kernel=2.6.24.2
Linux Kernel=2.6.18-rc5
Linux Kernel=2.6.26.5
Linux Kernel=2.6.16.34
Linux Kernel=2.6.25.20
Linux Kernel=2.6.27.37
Linux Kernel=2.6.27.21
Linux Kernel=2.6.18-rc4
Linux Kernel=2.6.22.21
Linux Kernel=2.6.25.12
Linux Kernel=2.6.23.7
Linux Kernel=2.6.30-rc2
Linux Kernel=2.6.17.8
Linux Kernel=2.6.14.4
Linux Kernel=2.6.14
Linux Kernel=2.6.16.31--rc3
Linux Kernel=2.6.25.5
Linux Kernel=2.6.17.4
Linux Kernel=2.6.16.18
Linux Kernel=2.6.27.27
Linux Kernel=2.6.17.14
Linux Kernel=2.6.10
Linux Kernel=2.6.23.8
Linux Kernel=2.6.25
Linux Kernel=2.6.27-rc6
Linux Kernel=2.6.16.45
Linux Kernel=2.6.22.12
Linux Kernel=2.6.25.18
Linux Kernel=2.6.14.3
Linux Kernel=2.6.29
Linux Kernel=2.6.24-rc3
Linux Kernel=2.6.18.3
Linux Kernel=2.6.25.8
Linux Kernel=2.6.16.37
Linux Kernel=2.6.30-rc3
Linux Kernel=2.6.11.6
Linux Kernel=2.6.16.48
Linux Kernel=2.6.11.11
Linux Kernel=2.6.16.13
Linux Kernel=2.6.27.10
Linux Kernel=2.6.27-rc5
Linux Kernel=2.6.3
Linux Kernel=2.6.31.4
Linux Kernel=2.6.21.6
Linux Kernel=2.6.26.6
Linux Kernel=2.6.22.1
Linux Kernel=2.6.27.17
Linux Kernel=2.6.16.4
Linux Kernel=2.6.23.16
Linux Kernel=2.6.31.6
Linux Kernel=2.6.17.3
Linux Kernel=2.6.27-rc3
Linux Kernel=2.6.24.1
Linux Kernel=2.6.20.5
Linux Kernel=2.6.25.6
Linux Kernel=2.6.22
Linux Kernel=2.6.28.4
Linux Kernel=2.6.4
Linux Kernel=2.6.27.16
Linux Kernel=2.6.26
Linux Kernel=2.6.16.15
Linux Kernel=2.6.27.20
Linux Kernel=2.6.15.6
Linux Kernel=2.6.24-rc5
Linux Kernel=2.6.26.3
Linux Kernel=2.6.20.16
Linux Kernel=2.6.15.1
Linux Kernel=2.6.11.5
Linux Kernel=2.6.28.2
Linux Kernel=2.6.25.9
Linux Kernel=2.6.19.3
Linux Kernel=2.6.27.4
Linux Kernel=2.6.27
Linux Kernel=2.6.19.4
Linux Kernel=2.6.25.13
Linux Kernel=2.6.28.5
Linux Kernel=2.6.19.1
Linux Kernel=2.6.18.4
Linux Kernel=2.6.16.1
Linux Kernel=2.6.18.1
Linux Kernel=2.6.20.21
Linux Kernel=2.6.31-rc1
Linux Kernel=2.6.27.33
Linux Kernel=2.6.27.13
Linux Kernel=2.6.23.1
Linux Kernel=2.6.2
Linux Kernel=2.6.14.5
Linux Kernel=2.6.13.2
Linux Kernel=2.6.25.7
Linux Kernel=2.6.17.5
Linux Kernel=2.6.24-rc4
Linux Kernel=2.6.18.5
Linux Kernel=2.6.21.1
Linux Kernel=2.6.16.32
Linux Kernel=2.6.13.5
Linux Kernel=2.6.16.57
Linux Kernel=2.6.16.49
Linux Kernel=2.6.25.3
Linux Kernel=2.6.27.36
Linux Kernel=2.6.17
Linux Kernel=2.6.24
Linux Kernel=2.6.31-rc6
Linux Kernel=2.6.31.1
Linux Kernel=2.6.19.2
Linux Kernel=2.6.26.2
Linux Kernel=2.6.21.4
Linux Kernel=2.6.16.11
Linux Kernel=2.6.20.17
Linux Kernel=2.6.16.14
Linux Kernel=2.6.20.12
Linux Kernel=2.6.16.25
Linux Kernel=2.6.27.15
Linux Kernel=2.6.16.21
Linux Kernel=2.6.16.33
Linux Kernel=2.6.30.7
Linux Kernel=2.6.8
Linux Kernel=2.6.16.28
Linux Kernel=2.6.17.10
Linux Kernel=2.6.21.5
Linux Kernel=2.6.25.15
Linux Kernel=2.6.14.1
Linux Kernel=2.6.28-rc5
Linux Kernel=2.6.23.15
Linux Kernel=2.6.16.23
Linux Kernel=2.6.29.4
Linux Kernel=2.6.12.5
Linux Kernel=2.6.15.7
Linux Kernel=2.6.20
Linux Kernel=2.6.23.10
Linux Kernel=2.6.22.7
Linux Kernel=2.6.27.26
Linux Kernel=2.6.27-rc7
Linux Kernel=2.6.16.3
Linux Kernel=2.6.27.8
Linux Kernel=2.6.2.27.13
Linux Kernel=2.6.24-rc1
Linux Kernel=2.6.28-rc1
Linux Kernel=2.6.26.1
Linux Kernel=2.6.25.19
Linux Kernel=2.6.20.20
Linux Kernel=2.6.16.36
Linux Kernel=2.6.30.8
Linux Kernel=2.6.14.6
Linux Kernel=2.6.12.1
Linux Kernel=2.6.27.9
Linux Kernel=2.6.11.9
Linux Kernel=2.6.16.46
Linux Kernel=2.6.17.1
Linux Kernel=2.6.20.8
Linux Kernel=2.6.27.25
Linux Kernel=2.6.30.9
Linux Kernel=2.6.20.15
Linux Kernel=2.6.22.18
Linux Kernel=2.6.0
Linux Kernel=2.6.25.8
Linux Kernel=2.6.16.54
Linux Kernel=2.6.13.4
Linux Kernel=2.6.22.20
Linux Kernel=2.6.23-rc2
Linux Kernel=2.6.20.18
Linux Kernel=2.6.23.9
Linux Kernel=2.6.22.6
Linux Kernel=2.6.23.3
Linux Kernel=2.6.18.8
Linux Kernel=2.6.22.3
Linux Kernel=2.6.12.2
Linux Kernel=2.6.16.31
Linux Kernel=2.6.30-rc5
Linux Kernel=2.6.16.26
Linux Kernel=2.6.29-rc2
Linux Kernel=2.6.16.62
Linux Kernel=2.6.25.2
Linux Kernel=2.6.18.2
Linux Kernel=2.6.28.8
Linux Kernel=2.6.31-rc5
Linux Kernel=2.6.25.1
Linux Kernel=2.6.16.29
Linux Kernel=2.6.29.1
Linux Kernel=2.6.23-rc1
Linux Kernel=2.6.24.4
Linux Kernel=2.6.27.19
Linux Kernel=2.6.28-rc7
Linux Kernel=2.6.27-rc8
Linux Kernel=2.6.25.16
Linux Kernel=2.6.16.31--rc5
Linux Kernel=2.6.22.9
Linux Kernel=2.6.25.17
Linux Kernel=2.6.20.11
Linux Kernel=2.6.19
Linux Kernel=2.6.20.3
Linux Kernel=2.6.16
Linux Kernel=2.6.30.4
Linux Kernel=2.6.28.3
Linux Kernel=2.6.22.13
Linux Kernel=2.6.19.7
Linux Kernel=2.6.21.3
Linux Kernel=2.6.27.28
Linux Kernel=2.6.24.5
Linux Kernel=2.6.16.51
Linux Kernel=2.6.15.2
Linux Kernel=2.6.20.19
Linux Kernel=2.6.16.22
Linux Kernel=2.6.22.17
Linux Kernel=2.6.16.58
Linux Kernel=2.6.28-rc6
Linux Kernel=2.6.16.40
Linux Kernel=2.6.27.35
Linux Kernel=2.6.16.47
Linux Kernel=2.6.16.42
Linux Kernel=2.6.27.22
Linux Kernel=2.6.23.14
Linux Kernel=2.6.17.11
Linux Kernel=2.6.16.10
Linux Kernel=2.6.12.4
Linux Kernel=2.6.16.41
Linux Kernel=2.6.16.52
Linux Kernel=2.6.11.3
Linux Kernel=2.6.20.10
Linux Kernel=2.6.16.24
Linux Kernel=2.6.31-rc7
Linux Kernel=2.6.25.10
Linux Kernel=2.6.22.11
Linux Kernel=2.6.16.55
Linux Kernel=2.6.16.31--rc2
Linux kernel=2.6.24.7
Linux Kernel=2.6.23
Linux Kernel=2.6.12.3
Linux Kernel=2.6.22.10
Linux Kernel=2.6.27-rc2
Linux Kernel=2.6.29.6
Linux Kernel=2.6.27-rc1
Linux Kernel=2.6.23.17
Linux Kernel=2.6.27.5
Linux Kernel=2.6.29-rc2_git7
Linux Kernel=2.6.23.2
Linux Kernel=2.6.25.1
Linux Kernel=2.6.25.4
Linux Kernel=2.6.28.9
Linux Kernel=2.6.30.2
Linux Kernel=2.6.7
Linux Kernel=2.6.25.3
Linux Kernel=2.6.21.7
Linux Kernel=2.6.30.6
Linux Kernel=2.6.16.30
Linux Kernel=2.6.21.2
Linux Kernel=2.6.15.4
Linux Kernel=2.6.27.7
Linux Kernel=2.6.16.59
Linux Kernel=2.6.30.1
Linux Kernel=2.6.16.38
Linux Kernel=2.6.24-rc2
Linux Kernel=2.6.16.17
Linux Kernel=2.6.26.8
Linux Kernel=2.6.20.2
Linux Kernel=2.6.22.22
Linux Kernel=2.6.28.6
Linux Kernel=2.6.16.12
Linux Kernel=2.6.29-rc1
Linux Kernel=2.6.16.31--rc1
Linux Kernel=2.6.29.rc1
Linux Kernel=2.6.31.5
Linux Kernel=2.6.16.27
Linux Kernel=2.6.16.53
Linux Kernel=2.6.28.7
Linux Kernel=2.6.18-rc7
Linux Kernel=2.6.25.5
Linux Kernel=2.6.12.6
Linux Kernel=2.6.31-rc8
Linux Kernel=2.6.17.7
Linux Kernel=2.6.20.1
Linux Kernel=2.6.11.7
Linux Kernel=2.6.27-rc4
Linux Kernel=2.6.16.2
Linux Kernel=2.6.24.6
Linux Kernel=2.6.28-rc3
Linux Kernel=2.6.31-rc3
Linux Kernel=2.6.18.6
Linux Kernel=2.6.15
Linux Kernel=2.6.27.32
Linux Kernel=2.6.16.44
Linux Kernel=2.6.23.12
Linux Kernel=2.6.30-rc4
Linux Kernel=2.6.16.35
Linux Kernel=2.6.19.6
Linux Kernel=2.6.16.50
Linux Kernel=2.6.25.11
Linux Kernel=2.6.27.31
Linux Kernel=2.6.18-rc6
Linux Kernel=2.6.29.2
Linux kernel=2.6.25.15
Linux Kernel=2.6.23.5
Linux Kernel=2.6.22.8
Linux Kernel=2.6.14.2
Linux Kernel=2.6.16.61
Linux Kernel=2.6.31-rc2
Linux Kernel=2.6.19.5
Linux Kernel=2.6.18
Linux Kernel=2.6.27.24
Linux Kernel=2.6.20.4
Linux Kernel=2.6.17.6
Linux Kernel=2.6.23.6
Linux Kernel=2.6.27.2
Linux Kernel=2.6.16.7
Linux Kernel=2.6.17.13
Linux Kernel=2.6.16.60
Linux Kernel=2.6.22.2
Linux Kernel=2.6.8.1
Linux Kernel=2.6.27.11
Linux Kernel=2.6.16.56
Linux Kernel=2.6.29.rc2
Linux Kernel=2.6.28-rc2
Linux Kernel<=2.6.32
Linux Kernel=2.6.22.19
Linux Kernel=2.6.24.3
Linux Kernel=2.6.31.2
Linux Kernel=2.6.27-rc9
Linux Kernel=2.6.30-rc6
Linux Kernel=2.6.25
Linux Kernel=2.6.20.14
Linux Kernel=2.6.25.2
Linux Kernel=2.6.22.5
Linux Kernel=2.6.32-rc3
Linux Kernel=2.6.25.7
Linux Kernel=2.6.30.5
Linux Kernel=2.6.25.14
Linux Kernel=2.6.20.7
Linux Kernel=2.6.28.1
Linux Kernel=2.6.30-rc1
Linux Kernel=2.6.16.5
Linux Kernel=2.6.30
Linux Kernel=2.6.11.4
Linux Kernel=2.6.26.4
Linux Kernel=2.6.25.12
Linux Kernel=2.6.16.19
Linux Kernel=2.6.27.6
Linux Kernel=2.6.26.7
Linux Kernel=2.6.29-git1
Linux Kernel=2.6.25.6
Linux Kernel=2.6.11.12
Linux Kernel=2.6.16.20
Linux Kernel=2.6.15.5
Linux Kernel=2.6.30-rc7-git6
Linux Kernel=2.6.28.10
Linux Kernel=2.6.22.16
Linux Kernel=2.6.11.1
Linux Kernel=2.6.30.3
Linux Kernel=2.6.16.31--rc4
Linux Kernel=2.6.18-rc1
Linux Kernel=2.6.9
Linux Kernel=2.6.27.23
Linux Kernel=2.6.13.1
Linux Kernel=2.6.23.11
Linux Kernel=2.6.27.14
Linux Kernel=2.6.28
Linux Kernel=2.6.29.5
Linux Kernel=2.6.22.14
Linux Kernel=2.6.6
Linux Kernel=2.6.25.10
Linux Kernel=2.6
Linux Kernel=2.6.12

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2009-3624?

    CVE-2009-3624 has a severity rating of high due to its potential to allow local users to gain elevated privileges or cause a denial of service.

  • How do I fix CVE-2009-3624?

    To fix CVE-2009-3624, users should upgrade to a patched version of the Linux kernel released after 2.6.32-rc5.

  • What types of systems are affected by CVE-2009-3624?

    CVE-2009-3624 affects various versions of the Linux kernel prior to 2.6.32-rc5, including many older distributions.

  • What is the exploit mechanism for CVE-2009-3624?

    The exploit mechanism for CVE-2009-3624 involves improper reference counting that can be triggered through specific system calls.

  • Who is vulnerable to CVE-2009-3624?

    Local users with access to the affected Linux systems are vulnerable to CVE-2009-3624.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203