The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-develUpgrade kernel-PAEUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-doc | Dec 1, 2016 | Aug 29, 2011 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 29, 2011 |
| Suse | — | Upgrade kernel-vmi-baseUpgrade kernel-desktopUpgrade kernel-iseries64Upgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-desktop-develUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade kernel-xenpaeUpgrade kernel-ec2-develUpgrade kernel-smpUpgrade kernel-ec2-extraUpgrade kernel-vmipaeUpgrade kernel-xen-baseUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-ppc64Upgrade kernel-symsUpgrade kernel-kdumppaeUpgrade kernel-desktop-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-pae-baseUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-vmi-develUpgrade kernel-source-vanillaUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-vanilla-baseUpgrade kernel-kdumpUpgrade kernel-ec2Upgrade kernel-bigsmpUpgrade kernel-traceUpgrade kernel-pae-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade preload-kmp-desktopUpgrade kernel-vanilla-develUpgrade preload-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-trace-base | Feb 17, 2015 | Aug 29, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-virtualUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.32-34-generic-pae | Nov 8, 2024 | Aug 29, 2011 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Aug 29, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub