The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, related to net/unix/af_unix.c and net/unix/garbage.c.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 7, 2016 | Feb 7, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 16, 2016 | Feb 8, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-s390xUpgrade kernel-kdump-develUpgrade kernel-bootwrapperUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade python-perf-debuginfoNo solution existsUpgrade kernel-rtUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfo-common-i686Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-docUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-docUpgrade kernel-rt-debugUpgrade kernel-kdumpUpgrade kernel-rt-trace-develUpgrade kernel-rt-trace-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-traceUpgrade perf-debuginfoUpgrade kernel-rt-devel | Oct 6, 2017 | Feb 7, 2016 |
| Suse | — | Upgrade kernel-develUpgrade kernel-trace-develUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-bigmem-baseUpgrade kernel-docsUpgrade kernel-paeUpgrade kernel-default-baseUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade kernel-ec2Upgrade kernel-bigmem-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-traceUpgrade kernel-bigmemUpgrade kernel-ec2-baseUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-ppc64-develUpgrade kernel-xenUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-bigsmp-baseUpgrade kernel-bigsmp-develUpgrade kernel-ppc64 | Apr 26, 2018 | Feb 7, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-83-lowlatencyUpgrade linux-image-3.19.0-56-powerpc-e500mcUpgrade linux-image-3.16.0-67-lowlatencyUpgrade linux-image-3.19.0-56-powerpc-smpUpgrade linux-image-4.2.0-30-lowlatencyUpgrade linux-image-3.19.0-56-genericUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-3.16.0-67-powerpc64-smpUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.16.0-67-generic-lpaeUpgrade linux-image-4.2.0-30-powerpc-smpUpgrade linux-image-4.2.0-30-powerpc-e500mcUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.13.0-83-powerpc-e500mcUpgrade linux-image-3.16.0-67-powerpc-smpUpgrade linux-image-3.19.0-56-generic-lpaeUpgrade linux-image-3.19.0-56-lowlatencyUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-3.13.0-83-powerpc-smpUpgrade linux-image-3.19.0-56-powerpc64-embUpgrade linux-image-3.13.0-83-powerpc64-smpUpgrade linux-image-4.2.0-1025-raspi2Upgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.13.0-83-powerpc-e500Upgrade linux-image-3.19.0-56-powerpc64-smpUpgrade linux-image-3.16.0-67-genericUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.16.0-67-powerpc64-embUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-4.2.0-30-generic-lpaeUpgrade linux-image-4.2.0-30-powerpc64-smpUpgrade linux-image-3.13.0-83-genericUpgrade linux-image-4.2.0-30-genericUpgrade linux-image-4.2.0-30-powerpc64-embUpgrade linux-image-3.13.0-83-generic-lpaeUpgrade linux-image-3.16.0-67-powerpc-e500mcUpgrade linux-image-3.13.0-83-powerpc64-embUpgrade linux-image-3.2.0-102-highbank | Feb 22, 2016 | Feb 7, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub