drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Nov 30, 2017 | Apr 27, 2016 |
| Oracle_linux | — | Upgrade kernel | Nov 9, 2016 | Apr 27, 2016 |
| Redhat_linux | — | Upgrade perf-debuginfoUpgrade kernel-rt-traceUpgrade kernel-rt-debuginfoUpgrade kernel-kdumpUpgrade kernel-kdump-debuginfoUpgrade kernel-docUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-docUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-rt-trace-develUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-bootwrapperUpgrade kernel-debuginfo-common-s390xUpgrade kernel-kdump-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-abi-whitelistsNo solution exists | Nov 4, 2016 | Apr 27, 2016 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-default | Mar 22, 2016 | Mar 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-85-powerpc-e500Upgrade linux-image-3.16.0-69-powerpc-smpUpgrade linux-image-4.2.0-1028-raspi2Upgrade linux-image-3.16.0-69-powerpc64-embUpgrade linux-image-3.13.0-85-genericUpgrade linux-image-3.16.0-69-powerpc64-smpUpgrade linux-image-3.16.0-69-genericUpgrade linux-image-3.19.0-58-genericUpgrade linux-image-3.13.0-85-powerpc-smpUpgrade linux-image-3.19.0-58-lowlatencyUpgrade linux-image-3.13.0-85-powerpc-e500mcUpgrade linux-image-3.19.0-58-powerpc-e500mcUpgrade linux-image-4.2.0-35-genericUpgrade linux-image-3.2.0-102-omapUpgrade linux-image-3.13.0-85-powerpc64-smpUpgrade linux-image-3.16.0-69-lowlatencyUpgrade linux-image-3.2.0-102-powerpc64-smpUpgrade linux-image-3.19.0-58-powerpc64-smpUpgrade linux-image-3.13.0-85-powerpc64-embUpgrade linux-image-3.2.0-102-genericUpgrade linux-image-3.16.0-69-powerpc-e500mcUpgrade linux-image-3.2.0-102-generic-paeUpgrade linux-image-3.2.0-1480-omap4Upgrade linux-image-3.13.0-85-generic-lpaeUpgrade linux-image-3.13.0-85-lowlatencyUpgrade linux-image-3.2.0-102-powerpc-smpUpgrade linux-image-3.19.0-58-generic-lpaeUpgrade linux-image-4.2.0-35-powerpc64-smpUpgrade linux-image-4.2.0-35-lowlatencyUpgrade linux-image-4.2.0-35-powerpc64-embUpgrade linux-image-3.16.0-69-generic-lpaeUpgrade linux-image-4.2.0-35-powerpc-smpUpgrade linux-image-4.2.0-35-powerpc-e500mcUpgrade linux-image-4.2.0-35-generic-lpaeUpgrade linux-image-3.2.0-102-virtualUpgrade linux-image-3.19.0-58-powerpc-smpUpgrade linux-image-3.2.0-102-highbankUpgrade linux-image-3.19.0-58-powerpc64-emb | Apr 27, 2016 | Apr 27, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub