The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 18, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 18, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 24, 2017 | Feb 18, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 18, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Nov 30, 2017 | Feb 18, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-devel | Nov 30, 2017 | Feb 18, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 23, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 23, 2017 | Feb 18, 2017 |
| Suse | — | Upgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-default | Feb 23, 2017 | Feb 18, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-highbankUpgrade linux-image-4.8.0-39-powerpc64-embUpgrade linux-image-4.4.0-64-generic-lpaeUpgrade linux-image-4.4.0-64-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-3.13.0-110-powerpc-smpUpgrade linux-image-4.8.0-39-genericUpgrade linux-image-4.8.0-39-powerpc-smpUpgrade linux-image-3.2.0-1501-omap4Upgrade linux-image-3.13.0-110-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.2.0-123-virtualUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-omap4Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-39-lowlatencyUpgrade linux-image-4.8.0-1026-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-omapUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-123-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.2.0-123-omapUpgrade linux-image-3.2.0-123-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-110-lowlatencyUpgrade linux-image-4.8.0-39-powerpc-e500mcUpgrade linux-image-4.4.0-64-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-110-genericUpgrade linux-image-3.13.0-110-powerpc-e500mcUpgrade linux-image-4.4.0-64-powerpc64-embUpgrade linux-image-4.4.0-1048-snapdragonUpgrade linux-image-3.13.0-110-powerpc-e500Upgrade linux-image-4.4.0-64-powerpc-smpUpgrade linux-image-4.4.0-64-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-3.2.0-123-generic-paeUpgrade linux-image-4.8.0-39-generic-lpaeUpgrade linux-image-3.13.0-110-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-110-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-3.2.0-123-powerpc-smpUpgrade linux-image-3.2.0-123-highbankUpgrade linux-image-4.4.0-64-powerpc-e500mcUpgrade linux-image-generic-paeUpgrade linux-image-powerpc64-emb-lts-xenial | Feb 23, 2017 | Feb 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub