The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 18, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 24, 2017 | Feb 18, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 18, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-devel | Nov 30, 2017 | Feb 18, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 30, 2017 | Feb 18, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 23, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 23, 2017 | Feb 18, 2017 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-default | Feb 23, 2017 | Feb 18, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-110-generic-lpaeUpgrade linux-image-4.4.0-64-powerpc64-embUpgrade linux-image-3.13.0-110-powerpc-e500mcUpgrade linux-image-4.8.0-39-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.2.0-123-highbankUpgrade linux-image-3.13.0-110-powerpc-e500Upgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-110-powerpc64-embUpgrade linux-image-3.2.0-123-powerpc-smpUpgrade linux-image-3.13.0-110-lowlatencyUpgrade linux-image-4.4.0-64-powerpc-smpUpgrade linux-image-4.4.0-64-powerpc-e500mcUpgrade linux-image-4.4.0-64-powerpc64-smpUpgrade linux-image-4.8.0-39-generic-lpaeUpgrade linux-image-4.4.0-1048-snapdragonUpgrade linux-image-3.2.0-123-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-110-genericUpgrade linux-image-generic-paeUpgrade linux-image-4.4.0-64-genericUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-123-generic-paeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-virtualUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-highbankUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-4.8.0-1026-raspi2Upgrade linux-image-4.4.0-64-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-omapUpgrade linux-image-4.8.0-39-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.2.0-123-virtualUpgrade linux-image-4.8.0-39-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.2.0-123-genericUpgrade linux-image-4.4.0-64-generic-lpaeUpgrade linux-image-3.13.0-110-powerpc-smpUpgrade linux-image-4.8.0-39-genericUpgrade linux-image-3.2.0-1501-omap4Upgrade linux-image-3.2.0-123-omapUpgrade linux-image-3.13.0-110-powerpc64-smpUpgrade linux-image-4.8.0-39-powerpc-smpUpgrade linux-image-omap4 | Feb 23, 2017 | Feb 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub