The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 4, 2013 |
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade python-perfUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-firmwareUpgrade perfUpgrade kernel | Dec 1, 2016 | Nov 4, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 4, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Nov 4, 2013 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade xen-kmp-traceUpgrade kernel-xenUpgrade kernel-source-rtUpgrade ocfs2-kmp-traceUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade kernel-ppc64-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_traceUpgrade btrfs-kmp-paeUpgrade hyper-v-kmp-traceUpgrade ext4dev-kmp-defaultUpgrade gfs2-kmp-traceUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-bigsmp-develUpgrade hyper-v-kmp-defaultUpgrade kernel-bigsmpUpgrade kernel-ppc64-baseUpgrade kernel-rt_trace-baseUpgrade kernel-bigsmp-baseUpgrade kernel-ec2-baseUpgrade hyper-v-kmp-paeUpgrade kernel-ec2-develUpgrade ocfs2-kmp-bigsmpUpgrade kernel-pae-extraUpgrade kernel-ec2Upgrade gfs2-kmp-ppc64Upgrade kernel-pae-baseUpgrade kernel-smpUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-vmipaeUpgrade lttng-modules-kmp-rtUpgrade kernel-traceUpgrade ocfs2-kmp-paeUpgrade drbd-kmp-rtUpgrade kernel-vmiUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade cluster-network-kmp-paeUpgrade gfs2-kmp-xenUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-bigsmpUpgrade drbd-kmp-rt_traceUpgrade kernel-defaultUpgrade ocfs2-kmp-ppc64Upgrade iscsitarget-kmp-rtUpgrade kernel-trace-develUpgrade ext4dev-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade kernel-pae-develUpgrade ocfs2-kmp-xenUpgrade kernel-rt-baseUpgrade cluster-network-kmp-rt_traceUpgrade gfs2-kmp-paeUpgrade cluster-network-kmp-traceUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-default-baseUpgrade ofed-kmp-rt_traceUpgrade btrfs-kmp-defaultUpgrade kernel-rt-develUpgrade xen-kmp-paeUpgrade ofed-kmp-rtUpgrade kernel-xen-extraUpgrade cluster-network-kmp-bigsmpUpgrade cluster-network-kmp-rtUpgrade kernel-xen-develUpgrade kernel-paeUpgrade cluster-network-kmp-xenUpgrade sle-hae-releaseUpgrade ocfs2-kmp-rt_traceUpgrade ext4dev-kmp-xenUpgrade gfs2-kmp-defaultUpgrade kernel-rt_trace-develUpgrade cluster-network-kmp-ppc64Upgrade kernel-kdumppaeUpgrade kernel-xen-baseUpgrade kernel-xenpaeUpgrade btrfs-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-ppc64 | Feb 17, 2015 | Nov 4, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-58-virtualUpgrade linux-image-2.6.32-61-sparc64-smpUpgrade linux-image-2.6.32-61-generic-paeUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.11.0-14-generic-lpaeUpgrade linux-image-3.2.0-58-highbankUpgrade linux-image-2.6.32-61-virtualUpgrade linux-image-2.6.32-365-ec2Upgrade linux-image-2.6.32-61-lpiaUpgrade linux-image-2.6.32-61-preemptUpgrade linux-image-3.5.0-236-omap4Upgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-3.5.0-44-highbankUpgrade linux-image-3.11.0-14-genericUpgrade linux-image-3.5.0-44-omapUpgrade linux-image-2.6.32-61-sparc64Upgrade linux-image-2.6.32-61-serverUpgrade linux-image-3.5.0-44-powerpc64-smpUpgrade linux-image-2.6.32-61-genericUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-2.6.32-61-386Upgrade linux-image-2.6.32-61-powerpc64-smpUpgrade linux-image-2.6.32-61-powerpcUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-44-genericUpgrade linux-image-2.6.32-61-versatileUpgrade linux-image-3.8.0-35-genericUpgrade linux-image-2.6.32-61-ia64Upgrade linux-image-3.2.0-58-generic-paeUpgrade linux-image-3.5.0-44-powerpc-smpUpgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-2.6.32-61-powerpc-smp | Nov 8, 2024 | Nov 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub