The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 23, 2017 | May 10, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 10, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-devel | Nov 30, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Nov 30, 2017 | May 10, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 25, 2017 | May 9, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 3, 2017 | May 10, 2017 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-ec2Upgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extra | Jun 8, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-3.13.0-123-powerpc-e500mcUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-4.4.0-83-genericUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.8.0-58-genericUpgrade linux-image-gkeUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-genericUpgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-123-powerpc64-emb | Jun 20, 2017 | May 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub