Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SYN packet while the socket is in a listening (TCP_LISTEN) state, which is not properly handled and causes the skb structure to be freed.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-03-31 11:00
Updated : 2017-09-18 18:30
NVD link : CVE-2010-1188
Mitre link : CVE-2010-1188
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
linux
- linux_kernel