Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ji Jianwen

Researcher fromRed Hat
#49904of 53,633
4.9Total CVSS
Vulnerabilities · 1
PT-2015-6098
4.9
2015-06-30
Linux · Linux Kernel · CVE-2015-3212
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.1.2 **Description** The issue is related to a race condition in the Linux kernel, specifically in the net/sctp/socket.c file. This condition allows local users to cause a denial of service, resulting in list corruption and panic, by making a rapid series of system calls related to sockets. The setsockopt calls are an example of how this can be demonstrated. **Recommendations** For Linux kernel versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to socket-related system calls to minimize the risk of exploitation.