The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service (use-after-free and system crash) by leveraging the ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP or IPPROTO_ICMPV6 protocol, and then making a connect system call after a disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-devel | Dec 1, 2016 | Aug 5, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 6, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 8, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 6, 2015 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2-devel | Dec 18, 2015 | Jun 16, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-85-virtualUpgrade linux-image-3.13.0-54-powerpc64-smpUpgrade linux-image-3.13.0-54-genericUpgrade linux-image-3.16.0-39-genericUpgrade linux-image-3.13.0-54-powerpc-e500Upgrade linux-image-3.16.0-39-powerpc64-embUpgrade linux-image-3.16.0-39-lowlatencyUpgrade linux-image-3.16.0-39-powerpc-smpUpgrade linux-image-3.2.0-1465-omap4Upgrade linux-image-3.19.0-20-powerpc64-smpUpgrade linux-image-3.13.0-54-powerpc-e500mcUpgrade linux-image-3.19.0-20-powerpc-smpUpgrade linux-image-3.16.0-39-powerpc64-smpUpgrade linux-image-3.19.0-20-genericUpgrade linux-image-3.19.0-20-powerpc64-embUpgrade linux-image-3.2.0-85-powerpc-smpUpgrade linux-image-3.13.0-54-lowlatencyUpgrade linux-image-3.19.0-20-powerpc-e500mcUpgrade linux-image-3.2.0-85-genericUpgrade linux-image-3.19.0-20-lowlatencyUpgrade linux-image-3.16.0-39-powerpc-e500mcUpgrade linux-image-3.13.0-54-powerpc64-embUpgrade linux-image-3.19.0-20-generic-lpaeUpgrade linux-image-3.2.0-85-generic-paeUpgrade linux-image-3.2.0-85-omapUpgrade linux-image-3.16.0-39-generic-lpaeUpgrade linux-image-3.2.0-85-powerpc64-smpUpgrade linux-image-3.13.0-54-powerpc-smpUpgrade linux-image-3.13.0-54-generic-lpaeUpgrade linux-image-3.2.0-85-highbank | Nov 8, 2024 | Aug 6, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub