The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-debugUpgrade kernel-devel | Dec 1, 2016 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-vmi-develUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade preload-kmp-desktopUpgrade kernel-vmiUpgrade kernel-kdumpUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade kernel-vanilla-baseUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade preload-kmp-defaultUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-ec2-extraUpgrade kernel-vanillaUpgrade kernel-kdumppaeUpgrade kernel-ec2-develUpgrade kernel-vmi-baseUpgrade kernel-vmipaeUpgrade kernel-xen-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-desktop-develUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-ppc64Upgrade kernel-xenpaeUpgrade kernel-pae-baseUpgrade kernel-smpUpgrade kernel-default-baseUpgrade kernel-desktop-baseUpgrade kernel-iseries64Upgrade kernel-desktopUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-devel | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-34-versatile | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub