The IPv6 flow label handling code (ip6_flowlabel.c) in Linux kernels 2.4 up to 2.4.32 and 2.6 before 2.6.14 modifies the wrong variable in certain circumstances, which allows local users to corrupt kernel memory or cause a denial of service (crash) by triggering a free of non-allocated memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-bigsmpUpgrade kernel-s390xUpgrade kernel-smpUpgrade kernel-pseries64Upgrade um-host-install-initrdUpgrade um-host-kernelUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-umUpgrade kernel-symsUpgrade kernel-pmac64Upgrade kernel-sn2Upgrade kernel-64k-pagesizeUpgrade kernel-s390 | Feb 17, 2015 | Nov 25, 2005 |
| Ubuntu | — | Upgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.8.1-6-k7Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.10-6-mckinleyUpgrade linux-image-2.6.8.1-6-power3Upgrade linux-image-2.6.8.1-6-686-smpUpgrade linux-image-2.6.8.1-6-amd64-k8Upgrade linux-image-2.6.8.1-6-686Upgrade linux-image-2.6.8.1-6-386Upgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.8.1-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.8.1-6-k7-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.8.1-6-power4-smpUpgrade linux-image-2.6.10-6-686-smp | Nov 8, 2024 | Nov 25, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub