The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-hugememUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-develUpgrade kernel-xenU-develUpgrade kernel-docUpgrade kernel-smpUpgrade kernel-hugemem-develUpgrade kernel-xenU | Dec 1, 2016 | Nov 10, 2008 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 10, 2008 |
| Suse | — | Upgrade kernel-64k-pagesizeUpgrade kernel-s390xUpgrade kernel-smpUpgrade kernel-xenpaeUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-pseries64Upgrade kernel-kdumpUpgrade kernel-docsUpgrade kernel-bigsmpUpgrade kernel-ps3Upgrade kernel-vanillaUpgrade um-host-install-initrdUpgrade kernel-umUpgrade kernel-ppc64Upgrade kernel-s390Upgrade kernel-xenUpgrade um-host-kernelUpgrade kernel-s390-debugUpgrade kernel-sourceUpgrade kernel-pmac64Upgrade kernel-paeUpgrade kernel-debugUpgrade kernel-iseries64Upgrade kernel-s390x-debugUpgrade kernel-sn2Upgrade kernel-syms | Feb 17, 2015 | Nov 10, 2008 |
| Ubuntu | — | Upgrade linux-image-2.6.15-53-hppa32Upgrade linux-image-2.6.15-53-itaniumUpgrade linux-image-2.6.22-16-umeUpgrade linux-image-2.6.15-53-hppa64Upgrade linux-image-2.6.24-22-mckinleyUpgrade linux-image-2.6.15-53-686Upgrade linux-image-2.6.15-53-amd64-genericUpgrade linux-image-2.6.22-16-xenUpgrade linux-image-2.6.24-22-rtUpgrade linux-image-2.6.15-53-k7Upgrade linux-image-2.6.24-22-hppa64Upgrade linux-image-2.6.24-22-genericUpgrade linux-image-2.6.24-22-itaniumUpgrade linux-image-2.6.15-53-amd64-k8Upgrade linux-image-2.6.22-16-lpiaUpgrade linux-image-2.6.24-22-386Upgrade linux-image-2.6.15-53-powerpc-smpUpgrade linux-image-2.6.22-16-virtualUpgrade linux-image-2.6.24-22-hppa32Upgrade linux-image-2.6.15-53-amd64-xeonUpgrade linux-image-2.6.15-53-powerpcUpgrade linux-image-2.6.22-16-hppa64Upgrade linux-image-2.6.24-22-lpiaUpgrade linux-image-2.6.22-16-hppa32Upgrade linux-image-2.6.24-22-powerpc64-smpUpgrade linux-image-2.6.24-22-serverUpgrade linux-image-2.6.22-16-mckinleyUpgrade linux-image-2.6.22-16-powerpc64-smpUpgrade linux-image-2.6.15-53-sparc64-smpUpgrade linux-image-2.6.15-53-itanium-smpUpgrade linux-image-2.6.15-53-amd64-serverUpgrade linux-image-2.6.15-53-serverUpgrade linux-image-2.6.15-53-mckinleyUpgrade linux-image-2.6.22-16-rtUpgrade linux-image-2.6.22-16-lpiacompatUpgrade linux-image-2.6.22-16-powerpc-smpUpgrade linux-image-2.6.15-53-sparc64Upgrade linux-image-2.6.27-9-serverUpgrade linux-image-2.6.22-16-sparc64Upgrade linux-image-2.6.27-9-genericUpgrade linux-image-2.6.24-22-xenUpgrade linux-image-2.6.24-22-virtualUpgrade linux-image-2.6.15-53-hppa64-smpUpgrade linux-image-2.6.24-22-sparc64-smpUpgrade linux-image-2.6.27-9-virtualUpgrade linux-image-2.6.24-22-openvzUpgrade linux-image-2.6.22-16-powerpcUpgrade linux-image-2.6.24-22-powerpcUpgrade linux-image-2.6.15-53-386Upgrade linux-image-2.6.22-16-sparc64-smpUpgrade linux-image-2.6.15-53-powerpc64-smpUpgrade linux-image-2.6.22-16-cellUpgrade linux-image-2.6.24-22-powerpc-smpUpgrade linux-image-2.6.24-22-lpiacompatUpgrade linux-image-2.6.15-53-server-bigironUpgrade linux-image-2.6.22-16-serverUpgrade linux-image-2.6.22-16-genericUpgrade linux-image-2.6.22-16-itaniumUpgrade linux-image-2.6.15-53-hppa32-smpUpgrade linux-image-2.6.24-22-sparc64Upgrade linux-image-2.6.15-53-mckinley-smpUpgrade linux-image-2.6.22-16-386 | Nov 8, 2024 | Nov 10, 2008 |
| Vmsa 2010 0010 | — | Upgrade VMware ESX 3.5 to build number 259926 | Nov 19, 2010 | Nov 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub