net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 22, 2007 |
| Suse | — | Upgrade kernel-s390Upgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-sourceUpgrade kernel-64k-pagesizeUpgrade um-host-kernelUpgrade kernel-xenpaeUpgrade kernel-sn2Upgrade suse-releaseUpgrade kernel-defaultUpgrade kernel-pseries64Upgrade kernel-bigsmpUpgrade kernel-xenUpgrade kernel-umUpgrade kernel-pmac64Upgrade um-host-install-initrdUpgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-symsUpgrade kernel-s390x | Feb 17, 2015 | Mar 22, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.15-28-itanium-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.17-11-hppa32Upgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.17-11-mckinleyUpgrade linux-image-2.6.15-28-hppa32Upgrade linux-image-2.6.15-28-hppa64Upgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.15-28-itaniumUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.17-11-itaniumUpgrade linux-image-2.6.15-28-hppa32-smpUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-hppa64-smpUpgrade linux-image-2.6.17-11-hppa64Upgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.15-28-server | Nov 8, 2024 | Mar 22, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub