CVE ID:	CVE-2009-0031
Description:	Memory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel 2.6.29-rc2 and earlier allows local users to cause a denial of service (kernel memory consumption) via unknown vectors related to a "missing kfree."
Test IDs:	1.3.6.1.4.1.25623.1.0.63939   1.3.6.1.4.1.25623.1.0.63681   1.3.6.1.4.1.25623.1.0.63959
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0031 33858 http://secunia.com/advisories/33858 34252 http://secunia.com/advisories/34252 34394 http://secunia.com/advisories/34394 34502 http://secunia.com/advisories/34502 34762 http://secunia.com/advisories/34762 34981 http://secunia.com/advisories/34981 35011 http://secunia.com/advisories/35011 51501 http://osvdb.org/51501 DSA-1749 http://www.debian.org/security/2009/dsa-1749 DSA-1787 http://www.debian.org/security/2009/dsa-1787 DSA-1794 http://www.debian.org/security/2009/dsa-1794 RHSA-2009:0264 http://rhn.redhat.com/errata/RHSA-2009-0264.html RHSA-2009:0331 http://www.redhat.com/support/errata/RHSA-2009-0331.html RHSA-2009:0360 http://www.redhat.com/support/errata/RHSA-2009-0360.html SUSE-SA:2009:010 http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.html USN-751-1 http://www.ubuntu.com/usn/usn-751-1 [oss-security] 20090119 CVE-2009-0031 kernel: local denial of service in keyctl_join_session_keyring http://www.openwall.com/lists/oss-security/2009/01/19/4 http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc http://git2.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0d54ee1c7850a954026deec4cd4885f331da35cc http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm http://support.avaya.com/elmodocs2/security/ASA-2009-114.htm oval:org.mitre.oval:def:11386 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11386