The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jul 1, 2017 | Sep 1, 2016 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2017 | Oct 16, 2016 |
| Debian | — | Upgrade linux | Mar 31, 2017 | Sep 4, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 21, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 11, 2017 | Aug 15, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 14, 2017 | Oct 16, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-extra | Oct 18, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.2.0-111-powerpc-smpUpgrade linux-image-4.4.0-1027-raspi2Upgrade linux-image-3.13.0-98-genericUpgrade linux-image-3.13.0-98-powerpc64-smpUpgrade linux-image-4.4.0-42-powerpc64-embUpgrade linux-image-3.2.0-1489-omap4Upgrade linux-image-4.4.0-42-generic-lpaeUpgrade linux-image-3.13.0-98-powerpc-e500Upgrade linux-image-3.13.0-98-powerpc-smpUpgrade linux-image-4.4.0-42-powerpc64-smpUpgrade linux-image-3.2.0-111-virtualUpgrade linux-image-3.2.0-111-highbankUpgrade linux-image-3.2.0-111-omapUpgrade linux-image-4.4.0-42-powerpc-e500mcUpgrade linux-image-4.4.0-42-lowlatencyUpgrade linux-image-4.4.0-1030-snapdragonUpgrade linux-image-4.4.0-42-powerpc-smpUpgrade linux-image-4.4.0-42-genericUpgrade linux-image-3.2.0-111-powerpc64-smpUpgrade linux-image-3.13.0-98-powerpc-e500mcUpgrade linux-image-3.13.0-98-lowlatencyUpgrade linux-image-3.2.0-111-generic-paeUpgrade linux-image-3.13.0-98-powerpc64-embUpgrade linux-image-3.2.0-111-genericUpgrade linux-image-3.13.0-98-generic-lpae | Jul 1, 2017 | Oct 13, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub