The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 27, 2016 | Jun 24, 2016 |
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-tools-libs | Sep 20, 2016 | Jul 3, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Jun 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf | Nov 30, 2017 | Jul 3, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 15, 2016 | Jun 24, 2016 |
| Redhat_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-rt-trace-develUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-bootwrapperUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-ppc64Upgrade kernelUpgrade kernel-kdump-develUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-docUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-kdump-debuginfoUpgrade kernel-kdumpUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-traceUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-devel | Oct 21, 2016 | Jul 3, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-default | Jul 26, 2016 | Jul 3, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-omapUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.2.0-128-omapUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.2.0-128-highbankUpgrade linux-image-highbankUpgrade linux-image-3.16.0-76-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.2.0-128-virtualUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-3.2.0-128-genericUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-3.2.0-128-powerpc64-smpUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-3.2.0-128-generic-paeUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-generic-paeUpgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-3.2.0-128-powerpc-smpUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-4.2.0-41-powerpc64-emb | Jul 3, 2016 | Jul 3, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub