The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-firmwareUpgrade kernel-xenUpgrade kernel-headersUpgrade perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-xen-develUpgrade python-perf | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-47-virtualUpgrade linux-image-2.6.32-352-ec2Upgrade linux-image-2.6.32-47-preemptUpgrade linux-image-3.5.0-19-omapUpgrade linux-image-3.2.0-34-generic-paeUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-2.6.32-47-lpiaUpgrade linux-image-3.2.0-1422-omap4Upgrade linux-image-3.2.0-34-powerpc-smpUpgrade linux-image-3.0.0-28-serverUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-2.6.32-47-powerpc-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-2.6.32-47-386Upgrade linux-image-3.2.0-34-genericUpgrade linux-image-2.6.32-47-ia64Upgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-2.6.32-47-sparc64Upgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-47-serverUpgrade linux-image-2.6.32-47-powerpc64-smpUpgrade linux-image-3.2.0-34-powerpc64-smpUpgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.2.0-34-highbankUpgrade linux-image-2.6.32-47-sparc64-smpUpgrade linux-image-2.6.32-47-generic-paeUpgrade linux-image-3.5.0-215-omap4Upgrade linux-image-2.6.32-47-versatileUpgrade linux-image-3.2.0-34-omapUpgrade linux-image-2.6.32-47-genericUpgrade linux-image-2.6.32-47-powerpcUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-3.5.0-19-highbankUpgrade linux-image-3.2.0-34-virtualUpgrade linux-image-3.5.0-19-powerpc-smpUpgrade linux-image-3.5.0-19-genericUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.5.0-19-powerpc64-smp | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub