The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-xen-develUpgrade kernel-debugUpgrade perfUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-debug-devel | Dec 1, 2016 | Mar 22, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 22, 2013 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Mar 22, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-19-powerpc-smpUpgrade linux-image-2.6.32-47-generic-paeUpgrade linux-image-2.6.32-47-powerpcUpgrade linux-image-3.2.0-34-virtualUpgrade linux-image-2.6.32-47-serverUpgrade linux-image-2.6.32-47-sparc64-smpUpgrade linux-image-3.0.0-28-virtualUpgrade linux-image-3.5.0-215-omap4Upgrade linux-image-3.2.0-34-highbankUpgrade linux-image-3.2.0-34-powerpc64-smpUpgrade linux-image-3.5.0-19-genericUpgrade linux-image-3.5.0-19-powerpc64-smpUpgrade linux-image-2.6.32-47-sparc64Upgrade linux-image-2.6.32-47-genericUpgrade linux-image-3.0.0-28-omapUpgrade linux-image-2.6.32-47-versatileUpgrade linux-image-3.0.0-1218-omap4Upgrade linux-image-3.0.0-28-generic-paeUpgrade linux-image-3.5.0-19-highbankUpgrade linux-image-3.2.0-34-omapUpgrade linux-image-2.6.32-47-powerpc64-smpUpgrade linux-image-3.5.0-19-omapUpgrade linux-image-3.2.0-34-generic-paeUpgrade linux-image-2.6.32-352-ec2Upgrade linux-image-2.6.32-47-386Upgrade linux-image-3.0.0-28-serverUpgrade linux-image-2.6.32-47-ia64Upgrade linux-image-3.2.0-34-genericUpgrade linux-image-3.0.0-28-powerpcUpgrade linux-image-3.2.0-34-powerpc-smpUpgrade linux-image-3.0.0-28-powerpc-smpUpgrade linux-image-3.0.0-28-powerpc64-smpUpgrade linux-image-2.6.32-47-powerpc-smpUpgrade linux-image-3.0.0-28-genericUpgrade linux-image-2.6.32-47-virtualUpgrade linux-image-2.6.32-47-preemptUpgrade linux-image-3.2.0-1422-omap4Upgrade linux-image-2.6.32-47-lpia | Nov 8, 2024 | Mar 22, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub