Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 7, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Mar 7, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 2, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2017 | Nov 18, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 3, 2017 | Mar 7, 2017 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default | Apr 5, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-132-powerpc-e500mcUpgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic | Sep 19, 2017 | Mar 7, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub