CVE-2015-7553: Race Condition
A race condition in netlink socket creation can trigger a kernel panic in netlinkrelease->moduleput for local users creating netlink sockets.
This issue is specific to Red Hat Enterprise Linux and does not affect upstream kernels. This issue was introduced in commit 3500659804251facce0cf4ee2ca657e0108e9a4f. This was introduced in kernel-3.10.0-304.el7 in the fix titled:
[net] netfilter: log: protect nflogregister against double registering.
It requires the nfnetlinklog module to be loaded to be effective.
This commit was introduced as part of a patchset that was required to backport netfilter functionality from upstream while attempting to maintain KABI. This flaw is RHEL specific.
Other sources
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlinklog module is loaded, allows local users to cause a denial of service (panic) by creating netlink sockets.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7553?
CVE-2015-7553 has been classified as a high severity vulnerability due to its potential to trigger kernel panic.
How do I fix CVE-2015-7553?
To fix CVE-2015-7553, apply the latest security updates provided by Red Hat for affected versions of the Enterprise Linux and Kernel RT.
Which versions of Red Hat are affected by CVE-2015-7553?
CVE-2015-7553 affects Red Hat Enterprise Linux 7.0, Red Hat Enterprise MRG 2.0, and Red Hat Kernel RT.
What is the impact of CVE-2015-7553?
The impact of CVE-2015-7553 includes a potential denial of service due to kernel panic when local users create netlink sockets.
Is CVE-2015-7553 present in upstream kernels?
No, CVE-2015-7553 is specific to Red Hat Enterprise Linux and does not affect upstream kernels.