Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows local users to read kernel memory or cause a denial of service (oops) via a negative optlen value.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.17-11-hppa64Upgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.17-11-powerpcUpgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-11-hppa32Upgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.17-11-386Upgrade linux-image-2.6.15-28-hppa64Upgrade linux-image-2.6.15-28-itanium-smpUpgrade linux-image-2.6.15-28-hppa32Upgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.17-11-genericUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.17-11-powerpc-smpUpgrade linux-image-2.6.15-28-itaniumUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-11-powerpc64-smpUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.17-11-sparc64-smpUpgrade linux-image-2.6.17-11-mckinleyUpgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.15-28-hppa64-smpUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.17-11-itaniumUpgrade linux-image-2.6.17-11-server-bigironUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.15-28-hppa32-smpUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-11-sparc64Upgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.17-11-serverUpgrade linux-image-2.6.20-16-server | Nov 8, 2024 | Mar 28, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub