Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Mar 7, 2017 |
| Debian | debian-upgrade-linux | May 1, 2017 | Mar 7, 2017 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 2, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Aug 17, 2017 | Nov 18, 2016 |
| Redhat_linux | — | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Aug 3, 2017 | Mar 7, 2017 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Apr 5, 2017 | Mar 7, 2017 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-132-genericubuntu-upgrade-linux-image-3-13-0-132-generic-lpaeubuntu-upgrade-linux-image-3-13-0-132-lowlatencyubuntu-upgrade-linux-image-3-13-0-132-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-132-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-132-powerpc-smpubuntu-upgrade-linux-image-3-13-0-132-powerpc64-embubuntu-upgrade-linux-image-3-13-0-132-powerpc64-smpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-smp | Sep 19, 2017 | Mar 7, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub