The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jun 27, 2016 | Jun 24, 2016 |
| Centos_linux | — | Upgrade kernel-docUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-abi-whitelistsUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools-libs-devel | Sep 20, 2016 | Jul 3, 2016 |
| Debian | — | Upgrade linux | Jun 28, 2016 | Jun 28, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug | Nov 30, 2017 | Jul 3, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 15, 2016 | Jun 24, 2016 |
| Redhat_linux | — | Upgrade kernel-kdumpUpgrade kernel-rt-trace-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-kdump-debuginfoUpgrade kernel-rt-docUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-traceUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-docUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade python-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-rt-debuginfoUpgrade kernel-kdump-develUpgrade kernel-debuginfo-common-ppc64Upgrade kernel-rtUpgrade kernelUpgrade kernel-abi-whitelistsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-bootwrapperUpgrade kernel-rt-trace-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade perf-debuginfo | Oct 21, 2016 | Jul 3, 2016 |
| Suse | — | Upgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade cluster-network-kmp-defaultUpgrade dlm-kmp-default | Jul 26, 2016 | Jul 3, 2016 |
| Ubuntu | — | Upgrade linux-image-3.16.0-76-lowlatencyUpgrade linux-image-3.13.0-91-powerpc-e500Upgrade linux-image-4.4.0-1016-raspi2Upgrade linux-image-4.2.0-41-powerpc64-smpUpgrade linux-image-3.19.0-64-generic-lpaeUpgrade linux-image-4.4.0-28-powerpc-smpUpgrade linux-image-3.16.0-76-powerpc64-embUpgrade linux-image-4.2.0-41-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-3.13.0-91-generic-lpaeUpgrade linux-image-3.2.0-128-generic-paeUpgrade linux-image-3.2.0-128-powerpc64-smpUpgrade linux-image-3.2.0-128-powerpc-smpUpgrade linux-image-4.2.0-41-powerpc64-embUpgrade linux-image-3.19.0-64-powerpc-smpUpgrade linux-image-3.13.0-91-powerpc64-smpUpgrade linux-image-3.13.0-91-genericUpgrade linux-image-4.2.0-41-powerpc-e500mcUpgrade linux-image-4.2.0-41-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-28-genericUpgrade linux-image-3.16.0-76-powerpc64-smpUpgrade linux-image-3.19.0-64-powerpc64-embUpgrade linux-image-4.4.0-28-generic-lpaeUpgrade linux-image-generic-paeUpgrade linux-image-4.4.0-28-lowlatencyUpgrade linux-image-3.2.0-128-genericUpgrade linux-image-4.4.0-1019-snapdragonUpgrade linux-image-3.13.0-91-lowlatencyUpgrade linux-image-3.16.0-76-genericUpgrade linux-image-3.2.0-128-highbankUpgrade linux-image-3.2.0-128-omapUpgrade linux-image-4.2.0-1033-raspi2Upgrade linux-image-3.16.0-76-powerpc-smpUpgrade linux-image-3.19.0-64-powerpc64-smpUpgrade linux-image-3.13.0-91-powerpc-e500mcUpgrade linux-image-highbankUpgrade linux-image-3.13.0-91-powerpc-smpUpgrade linux-image-3.19.0-64-lowlatencyUpgrade linux-image-4.4.0-28-powerpc-e500mcUpgrade linux-image-3.19.0-64-genericUpgrade linux-image-4.4.0-28-powerpc64-embUpgrade linux-image-omapUpgrade linux-image-3.19.0-64-powerpc-e500mcUpgrade linux-image-4.4.0-28-powerpc64-smpUpgrade linux-image-3.2.0-128-virtualUpgrade linux-image-4.2.0-41-generic-lpaeUpgrade linux-image-4.2.0-41-powerpc-smpUpgrade linux-image-3.16.0-76-generic-lpaeUpgrade linux-image-3.13.0-91-powerpc64-embUpgrade linux-image-3.16.0-76-powerpc-e500mc | Jul 3, 2016 | Jul 3, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub