The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-docUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-debug | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-26-powerpc64-smpUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.35-23-versatileUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-26-virtualUpgrade linux-image-2.6.35-23-omapUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.32-26-generic-paeUpgrade linux-image-2.6.35-23-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-23-powerpc64-smpUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.35-23-genericUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-26-ia64Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.32-26-lpiaUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.32-26-386Upgrade linux-image-2.6.35-23-powerpc-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.32-310-ec2Upgrade linux-image-2.6.32-26-preemptUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.32-26-serverUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.32-26-genericUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-26-sparc64-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.35-23-generic-paeUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.32-26-powerpcUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.35-23-serverUpgrade linux-image-2.6.32-26-powerpc-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.35-23-powerpcUpgrade linux-image-2.6.32-26-versatileUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-26-sparc64Upgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-rt | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub