The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 7, 2016 | Feb 7, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 16, 2016 | Feb 8, 2016 |
| Redhat_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-develUpgrade kernel-kdump-develUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade python-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develNo solution existsUpgrade kernel-rt-debug-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-i686Upgrade kernel-abi-whitelistsUpgrade kernel-bootwrapperUpgrade kernel-rt-debugUpgrade kernel-rt-trace-develUpgrade kernel-debug-develUpgrade kernel-rt-docUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-kdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-traceUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-kdumpUpgrade perfUpgrade kernel-firmwareUpgrade kernel-doc | Oct 6, 2017 | Feb 7, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-bigsmpUpgrade kernel-bigmem-baseUpgrade kernel-trace-develUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-pae-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-paeUpgrade kernel-bigmem-develUpgrade kernel-xen-develUpgrade kernel-obs-buildUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-bigsmp-develUpgrade kernel-ec2-develUpgrade kernel-bigsmp-baseUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-ec2-baseUpgrade kernel-xenUpgrade kernel-ppc64-develUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-bigmem | Apr 26, 2018 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-67-powerpc-smpUpgrade linux-image-3.19.0-56-generic-lpaeUpgrade linux-image-4.2.0-30-powerpc-smpUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.16.0-67-lowlatencyUpgrade linux-image-3.19.0-56-powerpc-smpUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-4.2.0-30-powerpc-e500mcUpgrade linux-image-3.16.0-67-powerpc64-smpUpgrade linux-image-3.13.0-83-lowlatencyUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.19.0-56-powerpc-e500mcUpgrade linux-image-3.19.0-56-genericUpgrade linux-image-3.19.0-56-lowlatencyUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-3.16.0-67-generic-lpaeUpgrade linux-image-3.13.0-83-powerpc-e500mcUpgrade linux-image-4.2.0-30-lowlatencyUpgrade linux-image-3.19.0-56-powerpc64-embUpgrade linux-image-3.19.0-56-powerpc64-smpUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-3.13.0-83-powerpc-smpUpgrade linux-image-3.16.0-67-genericUpgrade linux-image-3.13.0-83-powerpc64-embUpgrade linux-image-4.2.0-30-powerpc64-embUpgrade linux-image-4.2.0-30-generic-lpaeUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-4.2.0-30-powerpc64-smpUpgrade linux-image-4.2.0-30-genericUpgrade linux-image-3.13.0-83-generic-lpaeUpgrade linux-image-3.13.0-83-genericUpgrade linux-image-3.2.0-102-highbankUpgrade linux-image-4.2.0-1025-raspi2Upgrade linux-image-3.13.0-83-powerpc64-smpUpgrade linux-image-3.16.0-67-powerpc-e500mcUpgrade linux-image-3.13.0-83-powerpc-e500Upgrade linux-image-3.16.0-67-powerpc64-emb | Feb 22, 2016 | Feb 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub