The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel | Dec 1, 2016 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade kernel-desktop-develUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade kernel-pae-baseUpgrade kernel-desktopUpgrade kernel-xenpaeUpgrade kernel-docsUpgrade kernel-vmi-baseUpgrade kernel-debugUpgrade kernel-ec2-extraUpgrade kernel-symsUpgrade kernel-iseries64Upgrade kernel-kdumppaeUpgrade kernel-default-baseUpgrade kernel-ec2-develUpgrade kernel-smpUpgrade kernel-xen-baseUpgrade kernel-vmipaeUpgrade kernel-desktop-baseUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-trace-baseUpgrade kernel-bigsmpUpgrade kernel-debug-baseUpgrade kernel-kdumpUpgrade preload-kmp-desktopUpgrade kernel-vanilla-develUpgrade preload-kmp-defaultUpgrade kernel-vmi-develUpgrade kernel-vmiUpgrade kernel-paeUpgrade kernel-ec2Upgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-xen | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.35-30-generic-pae | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub