The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service (double free) via an application that makes an IPV6_RECVPKTINFO setsockopt system call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Mar 7, 2017 | Feb 18, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 18, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 24, 2017 | Feb 18, 2017 |
| Debian | — | Upgrade linux | Feb 24, 2017 | Feb 18, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 10, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug | Nov 30, 2017 | Feb 18, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headers | Nov 30, 2017 | Feb 18, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 23, 2017 | Feb 22, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 23, 2017 | Feb 18, 2017 |
| Suse | — | Upgrade cluster-network-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-default | Feb 23, 2017 | Feb 18, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.2.0-123-generic-paeUpgrade linux-image-3.2.0-123-highbankUpgrade linux-image-3.13.0-110-generic-lpaeUpgrade linux-image-3.13.0-110-lowlatencyUpgrade linux-image-4.4.0-64-genericUpgrade linux-image-generic-paeUpgrade linux-image-3.2.0-123-powerpc-smpUpgrade linux-image-4.8.0-39-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-110-powerpc64-embUpgrade linux-image-4.4.0-64-powerpc-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-64-powerpc64-embUpgrade linux-image-4.4.0-1048-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-110-powerpc-e500mcUpgrade linux-image-3.2.0-123-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-64-powerpc64-smpUpgrade linux-image-4.8.0-39-generic-lpaeUpgrade linux-image-4.4.0-64-powerpc-e500mcUpgrade linux-image-3.13.0-110-genericUpgrade linux-image-3.13.0-110-powerpc-e500Upgrade linux-image-genericUpgrade linux-image-3.2.0-123-omapUpgrade linux-image-3.2.0-123-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.8.0-39-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-omap4Upgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-110-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-3.2.0-123-virtualUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-110-powerpc64-smpUpgrade linux-image-4.4.0-64-lowlatencyUpgrade linux-image-4.8.0-39-powerpc-smpUpgrade linux-image-3.2.0-1501-omap4Upgrade linux-image-4.8.0-1026-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-omapUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-64-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-4.8.0-39-powerpc64-embUpgrade linux-image-highbankUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.8.0-39-genericUpgrade linux-image-powerpc64-smp-lts-xenial | Feb 23, 2017 | Feb 18, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub