The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-docUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-debugUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-debug-devel | Dec 1, 2016 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade kernel-develUpgrade kernel-vmipaeUpgrade kernel-ec2-extraUpgrade kernel-docsUpgrade kernel-ec2-baseUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-vmi-baseUpgrade kernel-ec2-develUpgrade kernel-ppc64Upgrade kernel-iseries64Upgrade kernel-vanillaUpgrade kernel-pae-baseUpgrade kernel-smpUpgrade kernel-desktopUpgrade kernel-desktop-develUpgrade kernel-desktop-baseUpgrade kernel-kdumppaeUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-xenpaeUpgrade kernel-xen-develUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade kernel-vmiUpgrade kernel-source-vanillaUpgrade kernel-kdumpUpgrade kernel-xenUpgrade preload-kmp-desktopUpgrade kernel-bigsmpUpgrade kernel-sourceUpgrade preload-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-debug-develUpgrade kernel-trace-baseUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-traceUpgrade kernel-vanilla-baseUpgrade kernel-paeUpgrade kernel-vmi-devel | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.35-30-server | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub