PT-2017-7224 · Red Hat+1 · Red Hat Enterprise Mrg 2+4

Wade Mealing · Published 2015-11-19 · Updated 2023-02-13 · CVE-2015-7553

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 7 kernel-rt Red Hat Enterprise MRG 2

Description A race condition exists in the kernel when the nfnetlink log module is loaded, allowing local users to cause a denial of service by creating netlink sockets.

Recommendations For Red Hat Enterprise Linux 7, consider disabling the nfnetlink log module as a temporary workaround until a patch is available. For kernel-rt, restrict access to the netlink sockets to minimize the risk of exploitation. For Red Hat Enterprise MRG 2, avoid using the nfnetlink log module in the kernel until the issue is resolved.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CESA-2015_2152

CVE-2015-7553

RHSA-2015:2152

RHSA-2015_2152

Affected Products

Centos

Red Hat

Red Hat Enterprise Linux 7

Red Hat Enterprise Mrg 2

Kernel-Rt

References · 56

• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3288 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5283 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9644 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4170 · Security Note
• https://bdu.fstec.ru/vul/2015-09847 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8215 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8171 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7842 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7421 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1288934 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0239 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7553 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-7553 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6526 · Security Note