The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denial of service (kernel panic) via NETLINK_FIB_LOOKUP replies, which trigger infinite recursion and a stack overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 7, 2007 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-xenUpgrade kernel-sourceUpgrade suse-releaseUpgrade kernel-xenpaeUpgrade kernel-bigsmpUpgrade kernel-default | Feb 17, 2015 | May 7, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.15-28-mckinley-smpUpgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.15-28-powerpc64-smpUpgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.15-28-k7Upgrade linux-image-2.6.15-28-amd64-genericUpgrade linux-image-2.6.15-28-amd64-xeonUpgrade linux-image-2.6.15-28-mckinleyUpgrade linux-image-2.6.15-28-amd64-k8Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.15-28-server-bigironUpgrade linux-image-2.6.15-28-sparc64-smpUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.15-28-powerpcUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.15-28-sparc64Upgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.15-28-serverUpgrade linux-image-2.6.15-28-powerpc-smpUpgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.15-28-amd64-serverUpgrade linux-image-2.6.15-28-686Upgrade linux-image-2.6.15-28-386Upgrade linux-image-2.6.17-12-powerpc | Nov 8, 2024 | May 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub