The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-docUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAE | Dec 1, 2016 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-bigsmpUpgrade kernel-pae-develUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade preload-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-kdumpUpgrade preload-kmp-desktopUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-traceUpgrade kernel-vmi-develUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade kernel-desktop-baseUpgrade kernel-debugUpgrade kernel-xen-baseUpgrade kernel-vmipaeUpgrade kernel-desktop-develUpgrade kernel-ec2-extraUpgrade kernel-kdumppaeUpgrade kernel-docsUpgrade kernel-ec2-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-desktopUpgrade kernel-default-baseUpgrade kernel-iseries64Upgrade kernel-xen-develUpgrade kernel-xenpaeUpgrade kernel-develUpgrade kernel-ppc64Upgrade kernel-vmi-baseUpgrade kernel-smpUpgrade kernel-vanillaUpgrade kernel-pae-base | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.35-30-versatile | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub