The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR option name and possibly a zero option length or invalid option value, which triggers a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 10, 2007 |
| Suse | — | Upgrade kernel-xenUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade kernel-iseries64Upgrade kernel-symsUpgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-xenpae | Feb 17, 2015 | Mar 10, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-11-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-hppa64Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.17-11-itaniumUpgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.15-28-itanium-smpUpgrade linux-image-2.6.15-28-hppa64-smpUpgrade linux-image-2.6.17-11-mckinleyUpgrade linux-image-2.6.15-28-hppa32-smpUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-itaniumUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.15-28-hppa32Upgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.17-11-hppa32Upgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-lowlatency | Nov 8, 2024 | Mar 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub