The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Dec 22, 2017 | Nov 15, 2017 |
| Debian | — | Upgrade linux | Feb 25, 2019 | Nov 15, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Dec 8, 2017 | Nov 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 18, 2018 | Nov 15, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 8, 2018 | Oct 17, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 17, 2017 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-source-azure | Dec 20, 2017 | Nov 15, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-116-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-116-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-oemUpgrade linux-image-4.13.0-1011-gcpUpgrade linux-image-4.4.0-1052-awsUpgrade linux-image-4.13.0-1021-oemUpgrade linux-image-4.4.0-1014-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-4.13.0-1014-raspi2Upgrade linux-image-4.4.0-116-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-1019-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-116-lowlatencyUpgrade linux-image-4.13.0-36-genericUpgrade linux-image-4.4.0-116-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.4.0-116-genericUpgrade linux-image-4.4.0-116-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-1011-azureUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1087-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-1085-raspi2Upgrade linux-image-4.13.0-36-lowlatencyUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-36-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trusty | Feb 23, 2018 | Nov 15, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub