kernel: ipv6: skb is unexpectedly freed

🗓️ 25 May 2010 15:29:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Use-after-free in Linux kernel before 2.6.20 with IPv6 receive packet info on listening sockets causes kernel panic.

Reporter	Title	Published	Views	Family All 70
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 4 : kernel (CESA-2010:0394)	10 May 201000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	5.3	ia64	kernel	0:2.6.18-128.17.1.el5	kernel-0:2.6.18-128.17.1.el5.ia64.rpm
Red Hat Enterprise Linux	5.3	ppc64	kernel	0:2.6.18-128.17.1.el5	kernel-0:2.6.18-128.17.1.el5.ppc64.rpm
Red Hat Enterprise Linux	5.3	s390x	kernel	0:2.6.18-128.17.1.el5	kernel-0:2.6.18-128.17.1.el5.s390x.rpm
Red Hat Enterprise Linux	5.3	x86_64	kernel	0:2.6.18-128.17.1.el5	kernel-0:2.6.18-128.17.1.el5.x86_64.rpm
Red Hat Enterprise Linux	5.3	any	kernel	0:2.6.18-128.17.1.el5.i686	kernel-0:2.6.18-128.17.1.el5.i686.noarch.rpm
Red Hat Enterprise Linux	5.3	any	kernel-pae	0:2.6.18-128.17.1.el5.i686	kernel-PAE-0:2.6.18-128.17.1.el5.i686.noarch.rpm
Red Hat Enterprise Linux	5.3	any	kernel-pae-debuginfo	0:2.6.18-128.17.1.el5.i686	kernel-PAE-debuginfo-0:2.6.18-128.17.1.el5.i686.noarch.rpm
Red Hat Enterprise Linux	5.3	any	kernel-pae-devel	0:2.6.18-128.17.1.el5.i686	kernel-PAE-devel-0:2.6.18-128.17.1.el5.i686.noarch.rpm
Red Hat Enterprise Linux	5.3	ia64	kernel-debug	0:2.6.18-128.17.1.el5	kernel-debug-0:2.6.18-128.17.1.el5.ia64.rpm
Red Hat Enterprise Linux	5.3	ppc64	kernel-debug	0:2.6.18-128.17.1.el5	kernel-debug-0:2.6.18-128.17.1.el5.ppc64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2010-1188
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-1188
cve	www.cve.org/CVERecord

27 Jun 2026 16:24Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.1

EPSS0.03307

linux kernel use after free ipv6 recv pktinfo listening sockets kernel panic