kernel: denial of service [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2013-2128

Created:

July 17, 2013

Updated:

July 18, 2013

Description:

From the CVE entry:

The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local users to cause a denial of service (system crash) via a crafted splice system call for a TCP socket.

Alerts:

Red Hat	RHSA-2013:1051-01	2013-07-16
Red Hat	RHSA-2013:1080-01	2013-07-16
CentOS	CESA-2013:1051	2013-07-17
Oracle	ELSA-2013-1051	2013-07-16
Scientific Linux	SL-kern-20130717	2013-07-17

(Log in to post comments)