Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capability to change a socket version, related to the packet_set_ring and packet_setsockopt functions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 9, 2016 | Dec 6, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 8, 2016 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 6, 2017 | Dec 8, 2016 |
| Debian | — | Upgrade linux | Mar 31, 2017 | Dec 8, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 13, 2017 | Dec 6, 2016 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 3, 2017 | Dec 8, 2016 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-ec2-devel | Dec 9, 2016 | Dec 7, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-53-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.8.0-30-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-53-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-paeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1034-raspi2Upgrade linux-image-3.2.0-118-generic-paeUpgrade linux-image-4.8.0-30-powerpc-smpUpgrade linux-image-omapUpgrade linux-image-3.13.0-105-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-118-omapUpgrade linux-image-3.13.0-105-powerpc-e500Upgrade linux-image-4.8.0-30-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-105-powerpc64-embUpgrade linux-image-4.8.0-30-powerpc64-embUpgrade linux-image-3.2.0-118-genericUpgrade linux-image-3.2.0-118-highbankUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.2.0-118-powerpc64-smpUpgrade linux-image-3.13.0-105-powerpc-smpUpgrade linux-image-4.4.0-53-powerpc-smpUpgrade linux-image-4.4.0-53-generic-lpaeUpgrade linux-image-3.13.0-105-generic-lpaeUpgrade linux-image-4.4.0-1039-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.8.0-1020-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-53-powerpc-e500mcUpgrade linux-image-3.2.0-1496-omap4Upgrade linux-image-4.8.0-30-generic-lpaeUpgrade linux-image-highbankUpgrade linux-image-3.13.0-105-lowlatencyUpgrade linux-image-4.4.0-53-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.8.0-30-lowlatencyUpgrade linux-image-3.13.0-105-powerpc-e500mcUpgrade linux-image-omap4Upgrade linux-image-generic-lpaeUpgrade linux-image-3.2.0-118-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-118-virtualUpgrade linux-image-3.13.0-105-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-53-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenial | Dec 6, 2016 | Dec 6, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub