ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Oct 1, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perf | Nov 28, 2019 | Oct 1, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 21, 2019 | Sep 20, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Oct 1, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 29, 2020 | Oct 1, 2019 |
| Suse | — | Upgrade kernel-default | Nov 14, 2019 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1058-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-168-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-168-genericUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1050-kvmUpgrade linux-image-4.4.0-168-powerpc64-smpUpgrade linux-image-4.4.0-168-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-4.15.0-1063-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-168-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-168-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1021-awsUpgrade linux-image-4.15.0-1063-oemUpgrade linux-image-4.4.0-168-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-oemUpgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1054-awsUpgrade linux-image-5.0.0-1007-oracleUpgrade linux-image-4.15.0-1048-gkeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-69-generic-lpaeUpgrade linux-image-4.4.0-1062-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1029-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1049-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-69-genericUpgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-4.15.0-69-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-35-genericUpgrade linux-image-4.4.0-1098-awsUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1025-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke | Nov 14, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub