The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a bind system call for an RDS socket on a system that lacks RDS transports.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-firmwareUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-xenUpgrade python-perfUpgrade kernel-docUpgrade perf | Dec 1, 2016 | Apr 1, 2014 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 1, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 1, 2014 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default | Dec 18, 2015 | Apr 1, 2014 |
| Ubuntu | — | Upgrade linux-image-3.11.0-22-genericUpgrade linux-image-3.2.0-63-powerpc64-smpUpgrade linux-image-2.6.32-60-lpiaUpgrade linux-image-2.6.32-60-virtualUpgrade linux-image-3.2.0-1446-omap4Upgrade linux-image-3.2.0-63-generic-paeUpgrade linux-image-3.2.0-63-omapUpgrade linux-image-3.2.0-63-highbankUpgrade linux-image-2.6.32-60-serverUpgrade linux-image-3.2.0-63-virtualUpgrade linux-image-2.6.32-60-preemptUpgrade linux-image-3.2.0-63-genericUpgrade linux-image-2.6.32-60-genericUpgrade linux-image-2.6.32-60-ia64Upgrade linux-image-3.8.0-41-genericUpgrade linux-image-3.5.0-51-genericUpgrade linux-image-2.6.32-60-powerpc64-smpUpgrade linux-image-3.2.0-63-powerpc-smpUpgrade linux-image-3.11.0-22-generic-lpaeUpgrade linux-image-2.6.32-60-386Upgrade linux-image-2.6.32-60-powerpc-smpUpgrade linux-image-2.6.32-364-ec2Upgrade linux-image-2.6.32-60-sparc64Upgrade linux-image-2.6.32-60-generic-paeUpgrade linux-image-2.6.32-60-powerpcUpgrade linux-image-2.6.32-60-sparc64-smpUpgrade linux-image-2.6.32-60-versatile | Nov 8, 2024 | Apr 1, 2014 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub