The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 23, 2017 | May 10, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | May 10, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-tools | Nov 30, 2017 | May 10, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headers | Nov 30, 2017 | May 10, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 25, 2017 | May 9, 2017 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 3, 2017 | May 10, 2017 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade gfs2-kmp-default | Jun 8, 2017 | May 10, 2017 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1063-snapdragonUpgrade linux-image-virtualUpgrade linux-image-3.13.0-123-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.4.0-83-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-4.8.0-58-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-83-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-4.8.0-1042-raspi2Upgrade linux-image-4.4.0-1022-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-123-lowlatencyUpgrade linux-image-4.8.0-58-powerpc-smpUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-83-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.8.0-58-lowlatencyUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-83-genericUpgrade linux-image-4.4.0-1061-raspi2Upgrade linux-image-3.13.0-123-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.8.0-58-powerpc64-embUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-83-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-58-generic-lpaeUpgrade linux-image-3.13.0-123-powerpc64-smpUpgrade linux-image-4.8.0-58-powerpc-e500mcUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-123-powerpc-e500Upgrade linux-image-4.4.0-83-powerpc-smpUpgrade linux-image-3.13.0-123-powerpc-smpUpgrade linux-image-4.4.0-83-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1018-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-123-genericUpgrade linux-image-3.13.0-123-powerpc-e500mc | Jun 20, 2017 | May 10, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub