The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validate protocol identifiers for certain protocol families, which allows local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE_NEWUSER support to execute a crafted SOCK_RAW application.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 28, 2015 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headers | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 17, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-kdumpUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade kernel-docUpgrade kernel-rt-trace-debuginfoNo solution existsUpgrade kernel-rt-debug-develUpgrade kernel-firmwareUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-traceUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-kdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-trace-develUpgrade kernel-rt-docUpgrade perf-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-i686Upgrade kernel-rtUpgrade python-perf-debuginfo | Oct 6, 2017 | Dec 28, 2015 |
| Suse | — | Upgrade libndr-develUpgrade libsamba-hostconfig0-32bitUpgrade libndr-standard-develUpgrade libsmbconf0Upgrade libndr1Upgrade libndr1-32bitUpgrade samba-cephUpgrade libsmbconf-develUpgrade libsmbldap2-32bitUpgrade kernel-ec2-extraUpgrade samba-libs-python3-32bitUpgrade libsmbconf0-32bitUpgrade libnetapi0Upgrade libsamba-errors-develUpgrade libsmbldap2Upgrade libwbclient-develUpgrade libsamba-errors0Upgrade libndr0-32bitUpgrade libndr-nbt0-32bitUpgrade libsamdb0Upgrade libwbclient0-32bitUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade libndr-standard0Upgrade libndr0Upgrade libdcerpc-develUpgrade libsmbldap0Upgrade samba-libs-python3Upgrade libnetapi-develUpgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libsamba-passdb-develUpgrade libsamba-errors0-32bitUpgrade kernel-obs-buildUpgrade libsmbclient0Upgrade samba-pythonUpgrade samba-kdcUpgrade samba-libs-32bitUpgrade libndr-krb5pac0-32bitUpgrade ctdbUpgrade libsamba-hostconfig-develUpgrade libsamba-credentials0-32bitUpgrade samba-core-develUpgrade libsamba-util0Upgrade libsamba-passdb0Upgrade libtevent-util0Upgrade kernel-defaultUpgrade libsamba-hostconfig0Upgrade libdcerpc-binding0Upgrade kernel-docsUpgrade libtevent-util0-32bitUpgrade sambaUpgrade libndr-standard0-32bitUpgrade libsamba-policy0Upgrade libndr-krb5pac-develUpgrade libsmbclient-develUpgrade libdcerpc0Upgrade libsamba-passdb0-32bitUpgrade samba-client-32bitUpgrade samba-clientUpgrade libnetapi0-32bitUpgrade libdcerpc0-32bitUpgrade libsamdb0-32bitUpgrade libwbclient0Upgrade libsmbclient0-32bitUpgrade libtevent-util-develUpgrade libsamba-util-develUpgrade kernel-ec2Upgrade libndr-krb5pac0Upgrade libsamba-policy-develUpgrade libsamba-policy0-python3Upgrade samba-winbindUpgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade kernel-ec2-develUpgrade libdcerpc-samr-develUpgrade libsamba-credentials0Upgrade libndr-nbt-develUpgrade libsamba-policy-python3-develUpgrade samba-python3Upgrade libsamdb-develUpgrade libsamba-credentials-develUpgrade samba-winbind-32bitUpgrade samba-docUpgrade libndr-nbt0 | Feb 2, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-3.2.0-98-genericUpgrade linux-image-4.2.0-27-powerpc-e500mcUpgrade linux-image-3.13.0-79-powerpc64-smpUpgrade linux-image-4.2.0-27-powerpc-smpUpgrade linux-image-3.19.0-51-powerpc64-smpUpgrade linux-image-3.13.0-79-powerpc-e500Upgrade linux-image-3.19.0-51-genericUpgrade linux-image-4.2.0-1022-raspi2Upgrade linux-image-3.2.0-98-generic-paeUpgrade linux-image-3.16.0-60-genericUpgrade linux-image-3.13.0-79-powerpc-e500mcUpgrade linux-image-4.2.0-27-powerpc64-smpUpgrade linux-image-3.13.0-79-powerpc-smpUpgrade linux-image-3.2.0-98-powerpc-smpUpgrade linux-image-3.16.0-60-powerpc-smpUpgrade linux-image-3.19.0-51-powerpc-e500mcUpgrade linux-image-3.13.0-79-genericUpgrade linux-image-3.2.0-1476-omap4Upgrade linux-image-3.2.0-98-omapUpgrade linux-image-3.19.0-51-generic-lpaeUpgrade linux-image-3.13.0-79-lowlatencyUpgrade linux-image-3.2.0-98-virtualUpgrade linux-image-4.2.0-27-powerpc64-embUpgrade linux-image-4.2.0-27-lowlatencyUpgrade linux-image-3.13.0-79-powerpc64-embUpgrade linux-image-3.16.0-60-powerpc64-smpUpgrade linux-image-3.16.0-60-powerpc-e500mcUpgrade linux-image-3.2.0-98-highbankUpgrade linux-image-3.19.0-51-powerpc-smpUpgrade linux-image-3.13.0-79-generic-lpaeUpgrade linux-image-3.16.0-60-generic-lpaeUpgrade linux-image-3.16.0-60-powerpc64-embUpgrade linux-image-3.19.0-51-powerpc64-embUpgrade linux-image-4.2.0-27-genericUpgrade linux-image-3.2.0-98-powerpc64-smpUpgrade linux-image-3.19.0-51-lowlatencyUpgrade linux-image-4.2.0-27-generic-lpaeUpgrade linux-image-3.16.0-60-lowlatency | Feb 2, 2016 | Dec 28, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub