The sock_setsockopt function in net/core/sock.c in the Linux kernel prior to 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
linux linux kernel 3.5.2 |
||
linux linux kernel |
||
linux linux kernel 3.5.5 |
||
linux linux kernel 3.5.3 |
||
linux linux kernel 3.5.4 |
||
linux linux kernel 3.5.1 |
||
novell suse linux enterprise server 11.0 |
||
novell suse linux enterprise server 10.0 |
Vulmon