Linux kernel 2.6.x does not properly restrict socket policy access to users with the CAP_NET_ADMIN capability, which could allow local users to conduct unauthorized activities via (1) ipv4/ip_sockglue.c and (2) ipv6/ipv6_sockglue.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-s390xUpgrade kernel-iseries64Upgrade kernel-pmac64Upgrade kernel-pseries64Upgrade um-host-install-initrdUpgrade kernel-debugUpgrade kernel-umUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-smpUpgrade um-host-kernelUpgrade kernel-64k-pagesizeUpgrade kernel-s390Upgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-sn2 | Feb 17, 2015 | Aug 16, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-5-power3Upgrade linux-image-2.6.8.1-5-amd64-xeonUpgrade linux-image-2.6.10-5-itanium-smpUpgrade linux-image-2.6.10-5-amd64-k8Upgrade linux-image-2.6.10-5-powerpcUpgrade linux-image-2.6.10-5-686-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-5-k7Upgrade linux-image-2.6.8.1-5-686-smpUpgrade linux-image-2.6.8.1-5-amd64-genericUpgrade linux-image-2.6.8.1-5-k7-smpUpgrade linux-image-2.6.10-5-mckinley-smpUpgrade linux-image-2.6.10-5-itaniumUpgrade linux-image-2.6.8.1-5-power4-smpUpgrade linux-image-2.6.10-5-686Upgrade linux-image-2.6.8.1-5-powerpcUpgrade linux-image-2.6.10-5-k7-smpUpgrade linux-image-2.6.8.1-5-amd64-k8-smp | Nov 8, 2024 | Aug 16, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub