Denial Of Service (DoS)

2019-01-1509:20:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

34.0%

JSON

Linux kernel is vulnerable to denial of service. A user-after-free (UAF) occurs in sys_mq_notify() due to the sock pointer not being set to NULL upon entry into the retry logic, allowing an attacker to cause a denial of service condition during a user-space close of a Netlink socket.

CPENameOperatorVersion
kerneleq2.6.18__348.23.1.el5
kerneleq2.6.18__194.17.1.el5
kerneleq2.6.18__371.9.1.el5
kerneleq2.6.32__358.6.1.el6
kerneleq2.6.32__642.6.2.el6
kerneleq2.6.32__431.40.2.el6
kerneleq3.10.0__693.el7
kerneleq2.6.32__131.17.1.el6
kerneleq2.6.32__642.3.1.el6
kerneleq2.6.18__348.18.1.el5

Name	Operator	Version
kernel	eq	2.6.18__348.23.1.el5
kernel	eq	2.6.18__194.17.1.el5
kernel	eq	2.6.18__371.9.1.el5
kernel	eq	2.6.32__358.6.1.el6
kernel	eq	2.6.32__642.6.2.el6
kernel	eq	2.6.32__431.40.2.el6
kernel	eq	3.10.0__693.el7
kernel	eq	2.6.32__131.17.1.el6
kernel	eq	2.6.32__642.3.1.el6
kernel	eq	2.6.18__348.18.1.el5