The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 27, 2016 | Jun 24, 2016 |
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-docUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-tools-libs | Sep 20, 2016 | Jul 3, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Jun 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 30, 2017 | Jul 3, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2016 | Jun 24, 2016 |
| Redhat_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-kdumpUpgrade kernel-tools-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-docUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-rt-traceUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-tools-libs-develUpgrade kernel-kdump-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-trace-develUpgrade kernel-bootwrapperUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Oct 21, 2016 | Jul 3, 2016 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2 | Jul 26, 2016 | Jul 3, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-128-powerpc-smpUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-3.2.0-128-powerpc64-smpUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-128-generic-paeUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.2.0-128-genericUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-generic-paeUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-omapUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-3.2.0-128-virtualUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-3.2.0-128-highbankUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.2.0-128-omapUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-highbank | Jul 3, 2016 | Jul 3, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub