The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 31, 2017 | Dec 28, 2016 |
| Suse | — | Upgrade kernel-bigmemUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-bigmem-develUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-bigsmp-develUpgrade kernel-bigsmp-baseUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-bigmem-baseUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-ec2-develUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-ppc64 | Apr 26, 2018 | Dec 3, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | Dec 28, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub