The tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service (tcp_xmit_retransmit_queue use-after-free and system crash) via a crafted SACK option.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Jul 1, 2017 | Sep 1, 2016 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Jan 27, 2017 | Oct 16, 2016 |
| Debian | debian-upgrade-linux | Mar 31, 2017 | Sep 4, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Dec 21, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Jan 11, 2017 | Aug 15, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Jan 14, 2017 | Oct 16, 2016 | |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-network-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-docssuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Oct 18, 2016 | Oct 16, 2016 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-98-genericubuntu-upgrade-linux-image-3-13-0-98-generic-lpaeubuntu-upgrade-linux-image-3-13-0-98-lowlatencyubuntu-upgrade-linux-image-3-13-0-98-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-98-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-98-powerpc-smpubuntu-upgrade-linux-image-3-13-0-98-powerpc64-embubuntu-upgrade-linux-image-3-13-0-98-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-111-genericubuntu-upgrade-linux-image-3-2-0-111-generic-paeubuntu-upgrade-linux-image-3-2-0-111-highbankubuntu-upgrade-linux-image-3-2-0-111-omapubuntu-upgrade-linux-image-3-2-0-111-powerpc-smpubuntu-upgrade-linux-image-3-2-0-111-powerpc64-smpubuntu-upgrade-linux-image-3-2-0-111-virtualubuntu-upgrade-linux-image-3-2-0-1489-omap4ubuntu-upgrade-linux-image-4-4-0-1027-raspi2ubuntu-upgrade-linux-image-4-4-0-1030-snapdragonubuntu-upgrade-linux-image-4-4-0-42-genericubuntu-upgrade-linux-image-4-4-0-42-generic-lpaeubuntu-upgrade-linux-image-4-4-0-42-lowlatencyubuntu-upgrade-linux-image-4-4-0-42-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-42-powerpc-smpubuntu-upgrade-linux-image-4-4-0-42-powerpc64-embubuntu-upgrade-linux-image-4-4-0-42-powerpc64-smp | Jul 1, 2017 | Oct 13, 2016 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub