VULNERABILITY INTELLIGENCE

CVE-2012-6657

CVSS score4.9 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2014-09-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with a stream socket, which allows local users to cause a denial of service (system crash) by leveraging the ability to create a raw socket.

Primary references