K16011 : Linux kernel vulnerability CVE-2012-6657

Security Advisory Description

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket. (CVE-2012-6657)

Impact

A local attacker may be able to cause a denial-of-service (DoS) by crashing the system.