Candidate: CVE-2005-1368 References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.11.8 http://linux.bkbits.net:8080/linux-2.6/cset%40423078fafVa6mAyny23YZ87hDipmTw Description: The key_user_lookup function in security/keys/key.c in Linux kernel 2.6.10 to 2.6.11.8 may allow attackers to cause a denial of service (oops) via SMP. Notes: horms> The fix for CAN-2005-1368 is in SVN for 2.6.11. horms> The code that this bug manifests in is not present horms> in 2.6.8 or 2.4.27. jmm> The code in question isn't present in Woody either Bugs: upstream: released (2.6.11.8) linux-2.6: N/A 2.6.8-sarge-security: N/A 2.4.27-sarge-security: N/A 2.4.19-woody-security: N/A 2.4.18-woody-security: N/A 2.4.17-woody-security: N/A 2.4.16-woody-security: N/A 2.4.17-woody-security-hppa: N/A 2.4.17-woody-security-ia64: N/A