In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() ipv4_sysctl_exit_net() is currently freeing net->ipv4.sysctl_local_reserved_ports too soon. Only after unregister_net_sysctl_table() we can be sure no threads can possibly use the sysctls, including /proc/sys/net/ipv4/ip_local_reserved_ports.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 3.16CNA affecteddefault affected | |
| Linux | Linux | >= 122ff243f5f104194750ecbc76d5946dd1eec934, < 155f90be5ee8be5b110ebc0b7da33c54c83b0208, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < 5b23a2ff379e70b6b9ff744a972b63e1f8f4d996, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < 6512c57c4638ddec113bf42439361ba85a12048d, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < 87a1e0fe7776da7ab411be332b4be58ac8840d10, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < 8e59d4d0dcde2dfb07a7ef855c849a2a0560aa57, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < a0ffc6081a8b27082dd5eae5aa1e3f59bbecf06c, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < a7f4eefb6e1458431eef9fa20fb363320d185f76, >= 122ff243f5f104194750ecbc76d5946dd1eec934, < ecf45080a4d3f4526cacb8b14060fe3b49a6913bCNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.