The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Apr 27, 2016 | Apr 27, 2016 |
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Oracle_linux | — | Upgrade perfUpgrade kernel-debugUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade python-perf | May 17, 2016 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2016 |
| Ubuntu | — | Upgrade linux-image-4.2.0-35-powerpc64-embUpgrade linux-image-3.19.0-58-powerpc64-embUpgrade linux-image-3.13.0-85-powerpc-e500mcUpgrade linux-image-3.13.0-85-powerpc64-smpUpgrade linux-image-4.2.0-35-powerpc64-smpUpgrade linux-image-4.2.0-35-generic-lpaeUpgrade linux-image-4.2.0-35-powerpc-e500mcUpgrade linux-image-3.16.0-69-generic-lpaeUpgrade linux-image-4.2.0-35-lowlatencyUpgrade linux-image-3.19.0-58-lowlatencyUpgrade linux-image-3.16.0-69-powerpc64-embUpgrade linux-image-3.19.0-58-powerpc-e500mcUpgrade linux-image-3.13.0-85-powerpc-e500Upgrade linux-image-3.13.0-85-generic-lpaeUpgrade linux-image-3.19.0-58-generic-lpaeUpgrade linux-image-3.13.0-85-powerpc64-embUpgrade linux-image-4.2.0-35-powerpc-smpUpgrade linux-image-3.19.0-58-genericUpgrade linux-image-3.16.0-69-powerpc-smpUpgrade linux-image-3.19.0-58-powerpc-smpUpgrade linux-image-3.13.0-85-genericUpgrade linux-image-3.16.0-69-powerpc-e500mcUpgrade linux-image-3.13.0-85-lowlatencyUpgrade linux-image-3.13.0-85-powerpc-smpUpgrade linux-image-3.16.0-69-lowlatencyUpgrade linux-image-3.16.0-69-powerpc64-smpUpgrade linux-image-3.16.0-69-genericUpgrade linux-image-3.19.0-58-powerpc64-smpUpgrade linux-image-4.2.0-1028-raspi2Upgrade linux-image-4.2.0-35-generic | Apr 11, 2016 | Apr 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub