ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel | Nov 28, 2019 | Oct 1, 2019 |
| Suse | — | Upgrade kernel-default | Nov 14, 2019 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-69-lowlatencyUpgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-4.4.0-1098-awsUpgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-4.15.0-1048-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-168-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1058-awsUpgrade linux-image-4.15.0-1029-oracleUpgrade linux-image-4.4.0-168-generic-lpaeUpgrade linux-image-4.4.0-168-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1050-kvmUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-168-powerpc64-smpUpgrade linux-image-4.4.0-168-genericUpgrade linux-image-4.15.0-1063-azureUpgrade linux-image-5.0.0-35-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-5.0.0-1021-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1054-awsUpgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1025-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-69-genericUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1062-kvmUpgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-168-powerpc64-embUpgrade linux-image-4.15.0-69-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1063-oemUpgrade linux-image-4.4.0-168-powerpc-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1049-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1007-oracle | Nov 14, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub