The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-firmwareUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-docUpgrade kernel-debug-devel | Dec 1, 2016 | Sep 28, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 28, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 22, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2012 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-symsUpgrade btrfs-kmp-xenUpgrade kernel-xenUpgrade xen-kmp-traceUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-pae-baseUpgrade hyper-v-kmp-paeUpgrade hyper-v-kmp-defaultUpgrade btrfs-kmp-paeUpgrade kernel-trace-develUpgrade ext4dev-kmp-xenUpgrade kernel-ec2-baseUpgrade hyper-v-kmp-traceUpgrade xen-kmp-defaultUpgrade ext4dev-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade btrfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade xen-kmp-paeUpgrade ext4dev-kmp-trace | Jun 4, 2015 | Sep 15, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-49-powerpc-smpUpgrade linux-image-2.6.32-354-ec2Upgrade linux-image-2.6.32-49-sparc64-smpUpgrade linux-image-2.6.32-49-386Upgrade linux-image-2.6.32-49-generic-paeUpgrade linux-image-3.2.0-34-genericUpgrade linux-image-3.2.0-34-omapUpgrade linux-image-2.6.32-49-ia64Upgrade linux-image-3.2.0-34-generic-paeUpgrade linux-image-3.2.0-34-highbankUpgrade linux-image-2.6.32-49-lpiaUpgrade linux-image-2.6.32-49-powerpcUpgrade linux-image-3.2.0-34-powerpc64-smpUpgrade linux-image-2.6.32-49-sparc64Upgrade linux-image-2.6.32-49-versatileUpgrade linux-image-3.2.0-1422-omap4Upgrade linux-image-2.6.32-49-virtualUpgrade linux-image-3.2.0-34-powerpc-smpUpgrade linux-image-2.6.32-49-preemptUpgrade linux-image-2.6.32-49-powerpc64-smpUpgrade linux-image-2.6.32-49-genericUpgrade linux-image-3.2.0-34-virtualUpgrade linux-image-2.6.32-49-server | Nov 8, 2024 | Sep 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub