The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-bigsmpUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-ppc64Upgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-xen | Feb 17, 2015 | Nov 15, 2007 |
| Ubuntu | — | Upgrade linux-image-2.6.22-14-umeUpgrade linux-image-2.6.17-12-hppa32Upgrade linux-image-2.6.17-12-powerpc-smpUpgrade linux-image-2.6.22-14-virtualUpgrade linux-image-2.6.20-16-powerpc-smpUpgrade linux-image-2.6.22-14-serverUpgrade linux-image-2.6.22-14-lpiacompatUpgrade linux-image-2.6.20-16-powerpc64-smpUpgrade linux-image-2.6.22-14-sparc64Upgrade linux-image-2.6.17-12-server-bigironUpgrade linux-image-2.6.22-14-genericUpgrade linux-image-2.6.22-14-powerpcUpgrade linux-image-2.6.17-12-itaniumUpgrade linux-image-2.6.20-16-hppa32Upgrade linux-image-2.6.20-16-sparc64Upgrade linux-image-2.6.20-16-powerpcUpgrade linux-image-2.6.17-12-serverUpgrade linux-image-2.6.22-14-cellUpgrade linux-image-2.6.22-14-powerpc64-smpUpgrade linux-image-2.6.20-16-genericUpgrade linux-image-2.6.20-16-386Upgrade linux-image-2.6.17-12-386Upgrade linux-image-2.6.22-14-itaniumUpgrade linux-image-2.6.22-14-rtUpgrade linux-image-2.6.22-14-powerpc-smpUpgrade linux-image-2.6.22-14-lpiaUpgrade linux-image-2.6.20-16-sparc64-smpUpgrade linux-image-2.6.17-12-sparc64Upgrade linux-image-2.6.22-14-hppa32Upgrade linux-image-2.6.17-12-mckinleyUpgrade linux-image-2.6.17-12-sparc64-smpUpgrade linux-image-2.6.17-12-genericUpgrade linux-image-2.6.22-14-xenUpgrade linux-image-2.6.22-14-hppa64Upgrade linux-image-2.6.17-12-powerpcUpgrade linux-image-2.6.22-14-sparc64-smpUpgrade linux-image-2.6.17-12-hppa64Upgrade linux-image-2.6.20-16-serverUpgrade linux-image-2.6.22-14-386Upgrade linux-image-2.6.20-16-hppa64Upgrade linux-image-2.6.17-12-powerpc64-smpUpgrade linux-image-2.6.20-16-lowlatencyUpgrade linux-image-2.6.20-16-mckinleyUpgrade linux-image-2.6.20-16-server-bigironUpgrade linux-image-2.6.20-16-itaniumUpgrade linux-image-2.6.22-14-mckinley | Nov 8, 2024 | Nov 15, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub