The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 1, 2018 | Dec 5, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 5, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 11, 2018 | Dec 5, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 5, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 8, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Jan 30, 2018 | Dec 5, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debug-devel | Jan 19, 2018 | Dec 5, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 8, 2018 | Dec 5, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 7, 2018 | Dec 5, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-extra | Dec 20, 2017 | Dec 5, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1052-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-36-genericUpgrade linux-image-gcpUpgrade linux-image-4.13.0-1011-azureUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.13.0-36-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-1021-oemUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.13.0-1014-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-1011-gcpUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-36-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-116-powerpc-smp | Feb 23, 2018 | Dec 5, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 5, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub