The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 4, 2013 |
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel | Dec 1, 2016 | Nov 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 4, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Nov 4, 2013 |
| Suse | — | Upgrade ocfs2-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade ext4dev-kmp-traceUpgrade cluster-network-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade kernel-trace-develUpgrade gfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade btrfs-kmp-defaultUpgrade drbd-kmp-rt_traceUpgrade kernel-defaultUpgrade kernel-rt-baseUpgrade gfs2-kmp-bigsmpUpgrade ofed-kmp-rt_traceUpgrade kernel-rt-develUpgrade kernel-pae-develUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade kernel-rt_trace-develUpgrade ext4dev-kmp-xenUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-rt_traceUpgrade cluster-network-kmp-xenUpgrade kernel-paeUpgrade cluster-network-kmp-ppc64Upgrade iscsitarget-kmp-rtUpgrade cluster-network-kmp-rtUpgrade gfs2-kmp-paeUpgrade kernel-kdumpUpgrade kernel-xen-baseUpgrade xen-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade xen-kmp-paeUpgrade cluster-network-kmp-bigsmpUpgrade kernel-xen-extraUpgrade gfs2-kmp-xenUpgrade ofed-kmp-rtUpgrade btrfs-kmp-xenUpgrade kernel-xen-develUpgrade kernel-xenpaeUpgrade kernel-kdumppaeUpgrade xen-kmp-traceUpgrade ocfs2-kmp-traceUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-xenUpgrade kernel-source-rtUpgrade kernel-symsUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64-baseUpgrade kernel-bigsmpUpgrade hyper-v-kmp-traceUpgrade kernel-ppc64-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_traceUpgrade ext4dev-kmp-defaultUpgrade gfs2-kmp-traceUpgrade kernel-vmipaeUpgrade ocfs2-kmp-bigsmpUpgrade kernel-bigsmp-baseUpgrade drbd-kmp-rtUpgrade hyper-v-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade gfs2-kmp-ppc64Upgrade kernel-default-develUpgrade kernel-sourceUpgrade btrfs-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-rt_trace-baseUpgrade kernel-vmiUpgrade kernel-traceUpgrade kernel-rtUpgrade lttng-modules-kmp-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-bigsmp-develUpgrade kernel-smpUpgrade kernel-pae-extraUpgrade kernel-syms-rtUpgrade hyper-v-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-ec2-devel | Feb 17, 2015 | Nov 4, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-61-generic-paeUpgrade linux-image-2.6.32-61-sparc64-smpUpgrade linux-image-2.6.32-61-lpiaUpgrade linux-image-3.5.0-44-highbankUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-2.6.32-365-ec2Upgrade linux-image-2.6.32-61-virtualUpgrade linux-image-3.5.0-44-omapUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.11.0-14-generic-lpaeUpgrade linux-image-2.6.32-61-preemptUpgrade linux-image-3.11.0-14-genericUpgrade linux-image-2.6.32-61-sparc64Upgrade linux-image-3.5.0-44-powerpc64-smpUpgrade linux-image-3.5.0-44-genericUpgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-2.6.32-61-versatileUpgrade linux-image-2.6.32-61-386Upgrade linux-image-2.6.32-61-powerpc64-smpUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-44-powerpc-smpUpgrade linux-image-2.6.32-61-powerpc-smpUpgrade linux-image-2.6.32-61-serverUpgrade linux-image-2.6.32-61-ia64Upgrade linux-image-2.6.32-61-genericUpgrade linux-image-2.6.32-61-powerpcUpgrade linux-image-3.2.0-58-generic-pae | Nov 8, 2024 | Nov 4, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub