In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat does not increment the file descriptor reference count, which allows close to set the socket to NULL during fchownat's execution, leading to a NULL pointer dereference and system crash.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Apr 27, 2020 | Jun 12, 2018 |
| Amazon_linux | — | Upgrade kernel | Jun 29, 2018 | Jun 12, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Jun 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 12, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Jun 12, 2018 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-default | Jan 18, 2019 | Jun 12, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1018-gcpUpgrade linux-image-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1017-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1020-awsUpgrade linux-image-4.15.0-33-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-33-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1021-raspi2Upgrade linux-image-4.15.0-33-genericUpgrade linux-image-4.15.0-1020-kvmUpgrade linux-image-4.15.0-33-generic-lpaeUpgrade linux-image-4.15.0-1022-azureUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae | Aug 31, 2018 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub