The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Apr 27, 2016 | Apr 27, 2016 |
| Debian | — | Upgrade linux | Mar 4, 2016 | Mar 3, 2016 |
| Oracle_linux | — | Upgrade kernel-docUpgrade perfUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-firmwareUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel | May 17, 2016 | Apr 27, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 22, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-69-generic-lpaeUpgrade linux-image-3.16.0-69-powerpc64-embUpgrade linux-image-3.19.0-58-generic-lpaeUpgrade linux-image-4.2.0-35-generic-lpaeUpgrade linux-image-3.13.0-85-generic-lpaeUpgrade linux-image-4.2.0-35-lowlatencyUpgrade linux-image-3.13.0-85-powerpc-e500Upgrade linux-image-3.19.0-58-powerpc-e500mcUpgrade linux-image-4.2.0-35-powerpc-smpUpgrade linux-image-3.19.0-58-lowlatencyUpgrade linux-image-3.19.0-58-powerpc64-embUpgrade linux-image-3.13.0-85-powerpc-e500mcUpgrade linux-image-4.2.0-35-powerpc64-embUpgrade linux-image-3.13.0-85-powerpc64-smpUpgrade linux-image-4.2.0-35-powerpc-e500mcUpgrade linux-image-3.13.0-85-powerpc64-embUpgrade linux-image-3.19.0-58-genericUpgrade linux-image-4.2.0-35-powerpc64-smpUpgrade linux-image-3.16.0-69-powerpc-smpUpgrade linux-image-3.19.0-58-powerpc-smpUpgrade linux-image-3.13.0-85-genericUpgrade linux-image-3.16.0-69-powerpc-e500mcUpgrade linux-image-3.16.0-69-genericUpgrade linux-image-4.2.0-35-genericUpgrade linux-image-4.2.0-1028-raspi2Upgrade linux-image-3.13.0-85-powerpc-smpUpgrade linux-image-3.16.0-69-lowlatencyUpgrade linux-image-3.16.0-69-powerpc64-smpUpgrade linux-image-3.19.0-58-powerpc64-smpUpgrade linux-image-3.13.0-85-lowlatency | Apr 11, 2016 | Apr 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub