The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 31, 2017 | Dec 28, 2016 |
| Suse | — | Upgrade kernel-ec2-baseUpgrade kernel-ppc64-develUpgrade kernel-symsUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ppc64-baseUpgrade kernel-defaultUpgrade kernel-ppc64Upgrade kernel-xen-develUpgrade kernel-bigmem-baseUpgrade kernel-bigmemUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-bigmem-develUpgrade kernel-trace-develUpgrade kernel-bigsmp-baseUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-default-baseUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-default-manUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-bigsmp-devel | Apr 26, 2018 | Dec 3, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Dec 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub