Description
A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +15 | 2.6.32-358.18.1.el6 | RHSA-2013:1173 |
| RHEL 5 | kernel +12 | 2.6.18-348.16.1.el5 | RHSA-2013:1166 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6.3 EUS | perf +15 | 2.6.32-279.37.2.el6 | RHSA-2013:1450 |
| Red Hat OpenStack 3 | perf +9 | 2.6.32-358.118.1.openstack.el6 | RHSA-2013:1195 |
Advisories 4
- RHSA-2013:1450 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2013:1173 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2013:1195 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2013:1166 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2013:1166 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=979936
- RHSA-2013:1173 vendor-advisory
- [oss-security] 20130630 Re: CVE request: Kernel 2.6.32+ IP_RETOPTS Buffer Poisoning DoS mailing-list
- RHSA-2013:1450 vendor-advisory