CVE-2010-2960: The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier ex...

Security readout for executives and security teams

CVE-2010-2960 is a Linux kernel flaw that can let a local user crash an affected system. The issue is in the kernel keyring session handling path. Business impact is mainly availability loss on older Linux hosts, especially shared servers or systems where untrusted local users can run code. Exposure is limited to Linux systems running kernel 2.6.35.4 or earlier, or distribution kernels carrying the vulnerable code. Risk is highest where users, containers, jobs, or hosted workloads can execute local code on the same host. Treat as a practical availability risk for legacy Linux estates. It is not evidenced as remotely exploitable or actively exploited in the provided sources, but vulnerable shared systems could be crashed by local users. Patch or retire affected kernels during normal security maintenance, with higher urgency for shared infrastructure. Mitigation focus: Inventory Linux hosts for kernel versions at or before 2.6.35.4.; Apply kernel updates from the relevant Linux distribution vendor advisory.; Prioritize shared, multi-user, hosting, CI, and container hosts..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.