Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Mar 24, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Feb 2, 2016 | Mar 24, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-30-genericUpgrade linux-image-3.13.0-29-powerpc-smpUpgrade linux-image-3.13.0-29-lowlatencyUpgrade linux-image-3.13.0-30-generic-lpaeUpgrade linux-image-3.13.0-29-powerpc64-embUpgrade linux-image-3.13.0-29-genericUpgrade linux-image-3.13.0-29-powerpc64-smpUpgrade linux-image-3.13.0-29-powerpc-e500Upgrade linux-image-3.13.0-29-generic-lpaeUpgrade linux-image-3.11.0-23-genericUpgrade linux-image-3.11.0-23-generic-lpaeUpgrade linux-image-3.13.0-29-powerpc-e500mc | Nov 8, 2024 | Mar 24, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub