CVE-2017-1000112

mediumpriority · attend · 45EPSS 0.208 · 98 %ileexploit · functionalDEEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

9 exploits · functional

Likely / severe?

20.8% (98th) EPSS

CVSS 6.9 · medium

Is it mine?

85 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-26

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE __ip_append_data() calls ip_ufo_append_data() to append. However in between two send() calls, the append path can be switched from UFO to non-UFO one, which leads to a memory corruption. In case UFO packet lengths exceeds MTU, copy = maxfraglen - skb->len becomes negative on the non-UFO path and the branch to allocate new skb is taken. This triggers fragmentation and computation of fraggap = skb_prev->len - maxfraglen. Fraggap can exceed MTU, causing copy = datalen - transhdrlen - fraggap to become negative. Subsequently skb_copy_and_csum_bits() writes out-of-bounds. A similar issue is present in IPv6 code. The bug was introduced in e89e9cf539a2 ("[IPv4/IPv6]: UFO Scatter-gather approach") on Oct 18 2005.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedkernel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-0:2.6.18-438.el5.src as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-PAE-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-PAE-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-PAE-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debug-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-common-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-common-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-debuginfo-common-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-doc-0:2.6.18-438.el5.noarch as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-headers-0:2.6.18-438.el5.i386 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-headers-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-headers-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-kdump-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-kdump-debuginfo-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-kdump-devel-0:2.6.18-438.el5.s390x as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-debuginfo-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-debuginfo-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-devel-0:2.6.18-438.el5.i686 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-xen-devel-0:2.6.18-438.el5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 5 ELS)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1931
Fixedkernel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-0:2.6.18-348.44.1.el5.src as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-PAE-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-PAE-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-PAE-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debug-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debuginfo-common-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-debuginfo-common-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-doc-0:2.6.18-348.44.1.el5.noarch as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-headers-0:2.6.18-348.44.1.el5.i386 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-headers-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-debuginfo-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-debuginfo-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-devel-0:2.6.18-348.44.1.el5.i686 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932
Fixedkernel-xen-devel-0:2.6.18-348.44.1.el5.x86_64 as a component of Red Hat Enterprise Linux Long Life (v. 5.9 server)redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.
https://access.redhat.com/errata/RHSA-2019:1932

cvss

Technical severity, 0–10. One row per scoring source.

7.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–7

v2.06.9mediumAV:L/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.4 · impact 10

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1 · impact 5.9

v3.07highCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US

v3.16.8mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Fsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USprimaryCWE-122US

exploits (9)

Public proof-of-concept and weaponised exploit code.

EDB-43418Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04/16.04) - Local Privilege Escalation (KASLR / SMEP)functional · exploit_db
EDB-45147Linux Kernel - UDP Fragmentation Offset 'UFO' Privilege Escalation (Metasploit)functional · exploit_db
exploit/linux/local/ufo_privilege_escalationLinux Kernel UDP Fragmentation Offset (UFO) Privilege Escalationfunctional · metasploit
EDB-47169Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)PoC · exploit_db
IT19083124/SNP-AssignmentExploit work Privilege Escalation CVE-2017-1000112PoC · poc_in_github
Spydomain/CVE-2017-1000112-PoCSpydomain/CVE-2017-1000112-PoCPoC · poc_in_github

affected products (85)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamar <19.12all versionscert_bundDE
Open Source CentOSall versionscert_bundDEcpe:/o:centos:centos:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE Linux Enterprise Desktop 12-SP2all versionscert_bundDEcpe:/o:suse:linux_enterprise_desktop:12-sp2
SUSE Linux Enterprise Server 12-SP2all versionscert_bundDEcpe:/o:suse:linux_enterprise_server:12-sp2
Ubuntu Linux 12.04 LTSall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:12.04_lts
Ubuntu Linux 14.04 LTSall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:14.04_lts
Ubuntu Linux 16.04 LTSall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:16.04_lts
Dell Avamar< 19.12cert_bundDE
n/a n/a≤ n/aenisa_euvdEU
linux linux kernel2.6.15 → 3.10.108nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.11 → 3.16.47nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.17 → 3.18.65nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel3.19 → 4.4.82nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel4.10 → 4.12.7nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux kernel4.5 → 4.9.43nvdUScpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

showing 20 of 85

advisories (3)

Vendor and ecosystem advisories describing this.

RHSA-2019:1931Red Hat Security Advisory: kernel security and bug fix update2019-07-29csaf · redhat_csafUS
An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2019:1932Red Hat Security Advisory: kernel security update2019-07-29csaf · redhat_csafUS
An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2025-0269Linux Kernel: Mehrere SchwachstellenDeutsch2017-08-10csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um beliebigen Programmcode mit Administratorrechten oder den Privilegien des angegriffenen Dienstes auszuführen oder einen Denial of Service Zustand herbeizuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund nvd redhat_csaf NVD CVE.org MITRE

published 2017-10-05modified 2026-06-17

related (4,137)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	2025-11-11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-39964US	medium5.5OT critical	1.57% (75th)	KEV	2025-10-13
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is…
CVE-2025-2783US	—OT critical	9.24% (95th)	KEV	2025-03-26
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malic…
CVE-2025-22224US	high8.2OT critical	1.56% (75th)	KEV	2025-03-04
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges…
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	2023-07-11
Windows Search Remote Code Execution Vulnerability

+4132 more

references (48)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan