The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending each descriptor over a UNIX socket before closing it. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-4312.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Apr 27, 2016 | Apr 27, 2016 |
| Debian | debian-upgrade-linux | Mar 4, 2016 | Mar 3, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-abi-whitelistsoracle-linux-upgrade-kernel-debugoracle-linux-upgrade-kernel-debug-develoracle-linux-upgrade-kernel-develoracle-linux-upgrade-kernel-docoracle-linux-upgrade-kernel-firmwareoracle-linux-upgrade-kernel-headersoracle-linux-upgrade-perforacle-linux-upgrade-python-perf | May 17, 2016 | Apr 27, 2016 |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 22, 2016 | |
| Ubuntu | ubuntu-upgrade-linux-image-3-13-0-85-genericubuntu-upgrade-linux-image-3-13-0-85-generic-lpaeubuntu-upgrade-linux-image-3-13-0-85-lowlatencyubuntu-upgrade-linux-image-3-13-0-85-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-85-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-85-powerpc-smpubuntu-upgrade-linux-image-3-13-0-85-powerpc64-embubuntu-upgrade-linux-image-3-13-0-85-powerpc64-smpubuntu-upgrade-linux-image-3-16-0-69-genericubuntu-upgrade-linux-image-3-16-0-69-generic-lpaeubuntu-upgrade-linux-image-3-16-0-69-lowlatencyubuntu-upgrade-linux-image-3-16-0-69-powerpc-e500mcubuntu-upgrade-linux-image-3-16-0-69-powerpc-smpubuntu-upgrade-linux-image-3-16-0-69-powerpc64-embubuntu-upgrade-linux-image-3-16-0-69-powerpc64-smpubuntu-upgrade-linux-image-3-19-0-58-genericubuntu-upgrade-linux-image-3-19-0-58-generic-lpaeubuntu-upgrade-linux-image-3-19-0-58-lowlatencyubuntu-upgrade-linux-image-3-19-0-58-powerpc-e500mcubuntu-upgrade-linux-image-3-19-0-58-powerpc-smpubuntu-upgrade-linux-image-3-19-0-58-powerpc64-embubuntu-upgrade-linux-image-3-19-0-58-powerpc64-smpubuntu-upgrade-linux-image-4-2-0-1028-raspi2ubuntu-upgrade-linux-image-4-2-0-35-genericubuntu-upgrade-linux-image-4-2-0-35-generic-lpaeubuntu-upgrade-linux-image-4-2-0-35-lowlatencyubuntu-upgrade-linux-image-4-2-0-35-powerpc-e500mcubuntu-upgrade-linux-image-4-2-0-35-powerpc-smpubuntu-upgrade-linux-image-4-2-0-35-powerpc64-embubuntu-upgrade-linux-image-4-2-0-35-powerpc64-smp | Apr 11, 2016 | Apr 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub