Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.10-6-hppa32-smpUpgrade linux-image-2.6.15-26-mckinley-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-image-2.6.12-10-amd64-k8Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.12-10-mckinley-smpUpgrade linux-image-2.6.10-6-386Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-image-2.6.15-26-serverUpgrade linux-image-2.6.10-6-powerpcUpgrade linux-image-2.6.15-26-amd64-k8Upgrade linux-image-2.6.15-26-hppa32-smpUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-2.6.12-10-hppa32Upgrade linux-image-2.6.10-6-power4Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade linux-image-2.6.15-26-hppa32Upgrade linux-image-2.6.12-10-386Upgrade linux-image-2.6.15-26-686Upgrade linux-image-2.6.12-10-sparc64Upgrade linux-image-2.6.12-10-hppa64-smpUpgrade linux-image-2.6.10-6-sparc64-smpUpgrade linux-image-2.6.10-6-hppa32Upgrade linux-image-2.6.15-26-sparc64-smpUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.12-10-iseries-smpUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-image-2.6.15-26-k7Upgrade linux-image-2.6.15-26-hppa64Upgrade linux-image-2.6.15-26-amd64-serverUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-itaniumUpgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-image-2.6.15-26-sparc64Upgrade linux-image-2.6.15-26-386Upgrade linux-image-2.6.12-10-k7-smpUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.12-10-sparc64-smpUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-2.6.15-26-powerpcUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.15-26-server-bigironUpgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.10-6-hppa64Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-image-2.6.15-26-hppa64-smpUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-image-2.6.10-6-mckinley-smpUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.12-10-itanium-smpUpgrade linux-image-2.6.10-6-k7-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-2.6.15-26-amd64-genericUpgrade linux-image-2.6.15-26-itaniumUpgrade linux-image-2.6.12-10-hppa32-smpUpgrade linux-image-2.6.15-26-mckinleyUpgrade linux-image-2.6.10-6-itaniumUpgrade linux-image-2.6.15-26-powerpc-smpUpgrade linux-image-2.6.10-6-hppa64-smpUpgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.10-6-itanium-smpUpgrade linux-image-2.6.15-26-powerpc64-smpUpgrade linux-image-2.6.15-26-amd64-xeonUpgrade linux-image-2.6.15-26-itanium-smpUpgrade linux-image-2.6.12-10-hppa64Upgrade linux-image-2.6.12-10-mckinleyUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.10-6-sparc64Upgrade linux-image-2.6.10-6-mckinley | Nov 8, 2024 | May 19, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub