The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before 3.10.0-327.22.1 in Red Hat Enterprise Linux for Real Time 7 and other products, allows remote attackers to execute SysRq commands via crafted ICMP Echo Request packets, as demonstrated by a brute-force attack to discover a cookie, or an attack that occurs after reading the local icmp_echo_sysrq file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 27, 2016 |
| Redhat_linux | — | Upgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-trace-develUpgrade kernel-rtUpgrade kernel-rt-docUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-traceUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64 | Jul 30, 2016 | Jun 23, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub