Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by using a socket that was not properly bound. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6937.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 28, 2015 | Nov 10, 2015 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 28, 2016 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.1.0.1.4.0 on Solaris 11.4 | Oct 19, 2018 | Dec 28, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 16, 2015 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-obs-build | Dec 18, 2015 | Nov 26, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-98-generic-paeUpgrade linux-image-3.16.0-60-genericUpgrade linux-image-4.2.0-27-powerpc-e500mcUpgrade linux-image-3.2.0-98-powerpc64-smpUpgrade linux-image-3.2.0-98-omapUpgrade linux-image-3.2.0-98-genericUpgrade linux-image-3.19.0-49-powerpc-e500mcUpgrade linux-image-4.2.0-27-powerpc64-embUpgrade linux-image-4.2.0-1022-raspi2Upgrade linux-image-3.19.0-49-genericUpgrade linux-image-3.16.0-60-powerpc-e500mcUpgrade linux-image-3.19.0-49-generic-lpaeUpgrade linux-image-3.16.0-60-powerpc64-embUpgrade linux-image-3.13.0-77-generic-lpaeUpgrade linux-image-4.2.0-27-powerpc64-smpUpgrade linux-image-3.13.0-77-powerpc-e500Upgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.16.0-60-powerpc-smpUpgrade linux-image-4.2.0-27-lowlatencyUpgrade linux-image-3.13.0-77-powerpc64-embUpgrade linux-image-3.13.0-77-genericUpgrade linux-image-4.2.0-27-powerpc-smpUpgrade linux-image-4.2.0-27-genericUpgrade linux-image-3.19.0-49-lowlatencyUpgrade linux-image-3.13.0-77-powerpc-e500mcUpgrade linux-image-3.13.0-77-powerpc-smpUpgrade linux-image-3.13.0-77-lowlatencyUpgrade linux-image-4.2.0-27-generic-lpaeUpgrade linux-image-3.16.0-60-powerpc64-smpUpgrade linux-image-3.2.0-98-virtualUpgrade linux-image-3.13.0-77-powerpc64-smpUpgrade linux-image-3.19.0-49-powerpc-smpUpgrade linux-image-3.16.0-60-lowlatencyUpgrade linux-image-3.16.0-60-generic-lpaeUpgrade linux-image-3.2.0-98-powerpc-smpUpgrade linux-image-3.19.0-49-powerpc64-smpUpgrade linux-image-3.2.0-98-highbankUpgrade linux-image-3.19.0-49-powerpc64-emb | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub