In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | May 11, 2018 | Apr 19, 2018 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Aug 28, 2019 | Jun 12, 2018 |
| Debian | debian-upgrade-linux | May 2, 2018 | May 1, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Dec 31, 2018 | Jun 12, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Jun 26, 2018 | Feb 9, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Jun 20, 2018 | May 1, 2018 | |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azure | May 23, 2018 | May 1, 2018 |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-153-genericubuntu-upgrade-linux-image-3-13-0-153-generic-lpaeubuntu-upgrade-linux-image-3-13-0-153-lowlatencyubuntu-upgrade-linux-image-3-13-0-153-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-153-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-153-powerpc-smpubuntu-upgrade-linux-image-3-13-0-153-powerpc64-embubuntu-upgrade-linux-image-3-13-0-153-powerpc64-smpubuntu-upgrade-linux-image-4-13-0-1023-raspi2ubuntu-upgrade-linux-image-4-13-0-1031-oemubuntu-upgrade-linux-image-4-13-0-46-genericubuntu-upgrade-linux-image-4-13-0-46-generic-lpaeubuntu-upgrade-linux-image-4-13-0-46-lowlatencyubuntu-upgrade-linux-image-4-4-0-1022-awsubuntu-upgrade-linux-image-4-4-0-1026-kvmubuntu-upgrade-linux-image-4-4-0-1060-awsubuntu-upgrade-linux-image-4-4-0-1090-raspi2ubuntu-upgrade-linux-image-4-4-0-1093-snapdragonubuntu-upgrade-linux-image-4-4-0-127-genericubuntu-upgrade-linux-image-4-4-0-127-generic-lpaeubuntu-upgrade-linux-image-4-4-0-127-lowlatencyubuntu-upgrade-linux-image-4-4-0-127-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-127-powerpc-smpubuntu-upgrade-linux-image-4-4-0-127-powerpc64-embubuntu-upgrade-linux-image-4-4-0-127-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon | May 29, 2018 | May 1, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub