The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-PAEUpgrade perfUpgrade kernel-docUpgrade kernel-xenUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headers | Dec 1, 2016 | Apr 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 1, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Apr 1, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-60-sparc64Upgrade linux-image-2.6.32-60-powerpc-smpUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-2.6.32-60-generic-paeUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-2.6.32-60-powerpcUpgrade linux-image-2.6.32-60-386Upgrade linux-image-2.6.32-60-powerpc64-smpUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-2.6.32-60-versatileUpgrade linux-image-2.6.32-60-sparc64-smpUpgrade linux-image-2.6.32-364-ec2Upgrade linux-image-3.2.0-63-virtualUpgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-2.6.32-60-preemptUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-2.6.32-60-lpiaUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-2.6.32-60-genericUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.11.0-22-genericUpgrade linux-image-2.6.32-60-serverUpgrade linux-image-2.6.32-60-virtualUpgrade linux-image-2.6.32-60-ia64 | Nov 8, 2024 | Apr 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub