kernel: ipv6: skb is unexpectedly freed
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 3 Extended Lifecycle Support | |||
| kernel-0:2.4.21-66.EL | cpe:/o:redhat:rhel_els:3 | RHSA-2010:0882 | 2010-11-12T00:00:00Z |
| Red Hat Enterprise Linux 4 | |||
| kernel-0:2.6.9-89.0.25.EL | cpe:/o:redhat:enterprise_linux:4 | RHSA-2010:0394 | 2010-05-05T00:00:00Z |
| Red Hat Enterprise Linux 4.7 Z Stream | |||
| kernel-0:2.6.9-78.0.31.EL | cpe:/o:redhat:rhel_eus:4.7 | RHSA-2010:0424 | 2010-05-18T00:00:00Z |
| Red Hat Enterprise Linux 5 | |||
| kernel-0:2.6.18-194.el5 | cpe:/o:redhat:enterprise_linux:5 | RHSA-2010:0178 | 2010-03-29T00:00:00Z |
| Red Hat Enterprise Linux 5.3.Z - Server Only | |||
| kernel-0:2.6.18-128.17.1.el5 | cpe:/o:redhat:rhel_eus:5.3 | RHSA-2010:0439 | 2010-05-25T00:00:00Z |
| Red Hat Enterprise Linux 5.4.Z - Server Only | |||
| kernel-0:2.6.18-164.17.1.el5 | cpe:/o:redhat:rhel_eus:5.4 | RHSA-2010:0380 | 2010-04-27T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2010-1218 | Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed. |
Ubuntu USN |
USN-947-1 | Linux kernel vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 3.3% (3.295% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.