The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-devel | Dec 1, 2016 | Oct 19, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 19, 2015 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 17, 2016 | Oct 19, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 6, 2015 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-default | Dec 18, 2015 | Oct 13, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-92-virtualUpgrade linux-image-3.2.0-92-generic-paeUpgrade linux-image-3.19.0-31-powerpc64-embUpgrade linux-image-3.13.0-66-powerpc-e500mcUpgrade linux-image-3.16.0-51-powerpc-smpUpgrade linux-image-3.2.0-1472-omap4Upgrade linux-image-3.19.0-31-powerpc-e500mcUpgrade linux-image-3.2.0-92-omapUpgrade linux-image-3.13.0-66-powerpc64-smpUpgrade linux-image-3.13.0-66-generic-lpaeUpgrade linux-image-3.16.0-51-powerpc64-smpUpgrade linux-image-3.13.0-66-powerpc64-embUpgrade linux-image-3.13.0-66-genericUpgrade linux-image-3.19.0-31-lowlatencyUpgrade linux-image-3.19.0-31-generic-lpaeUpgrade linux-image-3.13.0-66-powerpc-smpUpgrade linux-image-3.13.0-66-powerpc-e500Upgrade linux-image-3.16.0-51-powerpc64-embUpgrade linux-image-3.16.0-51-generic-lpaeUpgrade linux-image-3.19.0-31-genericUpgrade linux-image-3.2.0-92-powerpc64-smpUpgrade linux-image-3.19.0-31-powerpc-smpUpgrade linux-image-3.19.0-31-powerpc64-smpUpgrade linux-image-3.13.0-66-lowlatencyUpgrade linux-image-3.2.0-92-powerpc-smpUpgrade linux-image-3.16.0-51-genericUpgrade linux-image-3.16.0-51-powerpc-e500mcUpgrade linux-image-3.2.0-92-genericUpgrade linux-image-3.2.0-92-highbankUpgrade linux-image-3.16.0-51-lowlatency | Nov 8, 2024 | Oct 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub