The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 15, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 15, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libs | Dec 8, 2017 | Nov 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debugUpgrade perf | Jan 18, 2018 | Nov 15, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 8, 2018 | Oct 17, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2017 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-man | Dec 20, 2017 | Nov 15, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-36-lowlatencyUpgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.13.0-1011-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-36-generic-lpaeUpgrade linux-image-4.13.0-36-genericUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.13.0-1021-oemUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-4.13.0-1014-raspi2Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-1011-gcpUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-3.13.0-142-powerpc-e500 | Feb 23, 2018 | Nov 15, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub