Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service (use-after-free) by making multiple bind system calls without properly ascertaining whether a socket has the SOCK_ZAPPED status, related to net/l2tp/l2tp_ip.c and net/l2tp/l2tp_ip6.c.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Mar 7, 2017 |
| Debian | — | Upgrade linux | May 1, 2017 | Mar 7, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 2, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2017 | Nov 18, 2016 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 3, 2017 | Mar 7, 2017 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade cluster-network-kmp-default | Apr 5, 2017 | Mar 7, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-132-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-132-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-132-generic-lpaeUpgrade linux-image-3.13.0-132-powerpc-e500Upgrade linux-image-3.13.0-132-lowlatencyUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-132-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-132-genericUpgrade linux-image-3.13.0-132-powerpc-e500mc | Sep 19, 2017 | Mar 7, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub