Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390Upgrade kernel-sn2Upgrade um-host-kernelUpgrade kernel-64k-pagesizeUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-smpUpgrade kernel-pmac64Upgrade um-host-install-initrdUpgrade kernel-symsUpgrade kernel-pseries64Upgrade kernel-s390xUpgrade kernel-umUpgrade kernel-bigsmpUpgrade kernel-iseries64Upgrade kernel-debug | Feb 17, 2015 | Aug 16, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.10-5-powerpcUpgrade linux-image-2.6.10-5-amd64-k8Upgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-5-686-smpUpgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.10-5-k7Upgrade linux-image-2.6.10-5-itanium-smpUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.8.1-5-powerpcUpgrade linux-image-2.6.10-5-itaniumUpgrade linux-image-2.6.10-5-686Upgrade linux-image-2.6.8.1-5-k7-smpUpgrade linux-image-2.6.8.1-5-amd64-k8-smpUpgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.10-5-k7-smpUpgrade linux-image-2.6.10-5-mckinley-smp | Nov 8, 2024 | Aug 16, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub