Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

kernel: Exploitable memory corruption due to UFO to non-UFO path switch

🗓️ 10 Dec 2019 12:03:31Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com

Kernel memory corruption when switching UDP fragmentation offload to a non-offload path in ip_ufo_append_data with MSG_MORE, enabling root via unprivileged namespaces.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
Gitee		Exploit for Use After Free in Linux Linux_Kernel
27 Jul 202504:09
–gitee
Gitee		Exploit for Use After Free in Linux Linux_Kernel
14 Jan 202020:53
–gitee
Gitee		Exploit for Improper Access Control in Xen
14 Aug 202123:00
–gitee
Gitee		Exploit for CVE-2016-2384
2 Dec 202111:00
–gitee
Gitee		Exploit for Use After Free in Linux Linux_Kernel
3 Sep 202123:29
–gitee
Gitee		Exploit for CVE-2016-2384
27 Jul 202503:35
–gitee
0day.today		Linux Kernel < 4.4.0-83 / < 4.8.0-58 (Ubuntu 14.04/16.04) - Privilege Escalation Exploit
2 Jan 201800:00
–zdt
0day.today		Linux Kernel UDP Fragmentation Offset (UFO) Privilege Escalation Exploit
3 Aug 201800:00
–zdt
0day.today		Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) Local Privilege
26 Jul 201900:00
–zdt
GithubExploit		Exploit for CVE-2016-2384
16 Feb 201612:05
–githubexploit
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux7.3ppc64lekernel0:3.10.0-514.71.1.el7kernel-0:3.10.0-514.71.1.el7.ppc64le.rpm
Red Hat Enterprise Linux7.3x86_64kernel0:3.10.0-514.71.1.el7kernel-0:3.10.0-514.71.1.el7.x86_64.rpm
Red Hat Enterprise Linux7.3anykernel-abi-whitelists0:3.10.0-514.71.1.el7.noarchkernel-abi-whitelists-0:3.10.0-514.71.1.el7.noarch.noarch.rpm
Red Hat Enterprise Linux7.3ppc64lekernel-bootwrapper0:3.10.0-514.71.1.el7kernel-bootwrapper-0:3.10.0-514.71.1.el7.ppc64le.rpm
Red Hat Enterprise Linux7.3ppc64lekernel-debug0:3.10.0-514.71.1.el7kernel-debug-0:3.10.0-514.71.1.el7.ppc64le.rpm
Red Hat Enterprise Linux7.3x86_64kernel-debug0:3.10.0-514.71.1.el7kernel-debug-0:3.10.0-514.71.1.el7.x86_64.rpm
Red Hat Enterprise Linux7.3ppc64lekernel-debug-debuginfo0:3.10.0-514.71.1.el7kernel-debug-debuginfo-0:3.10.0-514.71.1.el7.ppc64le.rpm
Red Hat Enterprise Linux7.3x86_64kernel-debug-debuginfo0:3.10.0-514.71.1.el7kernel-debug-debuginfo-0:3.10.0-514.71.1.el7.x86_64.rpm
Red Hat Enterprise Linux7.3ppc64lekernel-debug-devel0:3.10.0-514.71.1.el7kernel-debug-devel-0:3.10.0-514.71.1.el7.ppc64le.rpm
Red Hat Enterprise Linux7.3x86_64kernel-debug-devel0:3.10.0-514.71.1.el7kernel-debug-devel-0:3.10.0-514.71.1.el7.x86_64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Jun 2026 17:56Current
7.1High risk
Vulners AI Score7.1
CVSS 26.9
CVSS 3.17
EPSS0.20797
CWE-122
kernel memory corruptionUDP fragmentation offloadpath switch issueunprivileged namespaces
0