kernel: ipv6: skb is unexpectedly freed

🗓️ 18 May 2010 22:03:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Use-after-free in kernel IPv6 handling triggers kernel panic from a SYN on a listening socket with packet info enabled.

Reporter	Title	Published	Views	Family All 70
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 4 : kernel (CESA-2010:0394)	10 May 201000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	4.7	ia64	kernel	0:2.6.9-78.0.31.EL	kernel-0:2.6.9-78.0.31.EL.ia64.rpm
Red Hat Enterprise Linux	4.7	ppc64	kernel	0:2.6.9-78.0.31.EL	kernel-0:2.6.9-78.0.31.EL.ppc64.rpm
Red Hat Enterprise Linux	4.7	s390	kernel	0:2.6.9-78.0.31.EL	kernel-0:2.6.9-78.0.31.EL.s390.rpm
Red Hat Enterprise Linux	4.7	s390x	kernel	0:2.6.9-78.0.31.EL	kernel-0:2.6.9-78.0.31.EL.s390x.rpm
Red Hat Enterprise Linux	4.7	x86_64	kernel	0:2.6.9-78.0.31.EL	kernel-0:2.6.9-78.0.31.EL.x86_64.rpm
Red Hat Enterprise Linux	4.7	any	kernel	0:2.6.9-78.0.31.EL.i686	kernel-0:2.6.9-78.0.31.EL.i686.noarch.rpm
Red Hat Enterprise Linux	4.7	any	kernel	0:2.6.9-78.0.31.EL.ppc64iseries	kernel-0:2.6.9-78.0.31.EL.ppc64iseries.noarch.rpm
Red Hat Enterprise Linux	4.7	ia64	kernel-debuginfo	0:2.6.9-78.0.31.EL	kernel-debuginfo-0:2.6.9-78.0.31.EL.ia64.rpm
Red Hat Enterprise Linux	4.7	ppc64	kernel-debuginfo	0:2.6.9-78.0.31.EL	kernel-debuginfo-0:2.6.9-78.0.31.EL.ppc64.rpm
Red Hat Enterprise Linux	4.7	s390	kernel-debuginfo	0:2.6.9-78.0.31.EL	kernel-debuginfo-0:2.6.9-78.0.31.EL.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-1188
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-1188
cve	www.cve.org/CVERecord

27 Jun 2026 16:24Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.1

EPSS0.03307

linux kernel use after free ipv6 handling listening socket syn packet kernel panic packet info tcp input vulnerability