CVE-2016-0728

A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the join_session_keyring() function. A local, unprivileged user could use this flaw to escalate their privileges on the system.

This issue does not affect the Linux kernels as shipped with Red Hat Enterprise Linux 5 and 6.

Refer to https://access.redhat.com/node/2131021 for further information.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.