CVE-2015-7553
published 2017-09-14CVE-2015-7553: Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users…
PriorityP415medium4.7CVSS 3.0
AVLACHPRLUINSUCNINAH
EPSS
0.21%
11.5th percentile
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_mrg | — | — |
CVSS provenance
nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
vendor_debian4.7LOW
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: nfnetlink race in NETLINK_NFLOG socket creation
vendor_redhat·2015-12-15·CVSS 4.7
CVE-2015-7553 [MEDIUM] CWE-362 kernel: nfnetlink race in NETLINK_NFLOG socket creation
kernel: nfnetlink race in NETLINK_NFLOG socket creation
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.
A race-condition flaw was discovered in the kernel's netlink module creation, which can trigger a kernel panic in netlink_release->module_put for local users creating netlink sockets. The flaw is specific to Red Hat Enterprise Linux and does not affect upstream kernels. The nfnetlink_log module must be loaded before the flaw can occur.
Statement: This issue does not affect Red Hat Enterprise Linux 5 and 6.
This issue affects the Linux kernels as shipped with Red Hat Enterprise Linux 7, kernel-rt and Red Hat En
Debian
CVE-2015-7553: linux - Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Ha...
vendor_debian·2015·CVSS 4.7
CVE-2015-7553 [MEDIUM] CVE-2015-7553: linux - Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Ha...
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-c35m-qv8m-73h9: Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows lo
ghsa_unreviewed·2022-05-13
CVE-2015-7553 [MEDIUM] CWE-362 GHSA-c35m-qv8m-73h9: Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows lo
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.
No detection rules found.
No public exploits indexed.
2017-09-14
Published