The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-umUpgrade um-host-kernelUpgrade kernel-s390Upgrade um-host-install-initrdUpgrade kernel-sn2Upgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-pseries64Upgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-source | Feb 17, 2015 | Nov 25, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.8.1-6-amd64-k8Upgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.8.1-6-power4-smpUpgrade linux-image-2.6.8.1-6-386Upgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.8.1-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.8.1-6-686Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.8.1-6-power3Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.8.1-6-k7Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-k7-smp | Nov 8, 2024 | Nov 25, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub