The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 23, 2017 | May 10, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | May 10, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Nov 30, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools | Nov 30, 2017 | May 10, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 25, 2017 | May 9, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 3, 2017 | May 10, 2017 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-default | Jun 8, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-4.8.0-58-genericUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-powerpc-e500mc | Jun 20, 2017 | May 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub