Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2020-25673: Linux core socket leak can cause system hangs
CVE-2020-25673 · published 6 years ago
Summary
The Linux operating system versions provided by Canonical for AWS, Azure, LTS Xenial and other installations have a flaw in how network connections are handled. Over time this can waste memory and cause the server to stop responding. Install the latest security updates from your Linux vendor as soon as they are available to fix the problem.
What to do
- Update canonical linux-aws to version 4.4.0-1102.107.
- Update canonical linux-azure to version 4.15.0-1115.128~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-222.255~14.04.1.
- Update canonical linux to version 4.4.0-222.255.
- Update canonical linux-aws to version 4.4.0-1138.152.
- Update canonical linux-aws-hwe to version 4.15.0-1103.110~16.04.1.
- Update canonical linux-azure to version 4.15.0-1115.128~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1100.113~16.04.1.
- Update canonical linux-hwe to version 4.15.0-144.148~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1103.112.
- Update canonical linux-oracle to version 4.15.0-1072.80~16.04.1.
- Update canonical linux-fips to version 4.4.0-1072.78.
- Update canonical linux to version 4.15.0-144.148.
- Update canonical linux-aws to version 4.15.0-1103.110.
- Update canonical linux-aws-5.4 to version 5.4.0-1049.51~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1115.128.
- Update canonical linux-azure-5.4 to version 5.4.0-1048.50~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1022.26.
- Update canonical linux-gcp-4.15 to version 4.15.0-1100.113.
- Update canonical linux-gcp-5.4 to version 5.4.0-1044.47~18.04.2.
- Update canonical linux-gke-5.4 to version 5.4.0-1044.46~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1016.17~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-74.83~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1092.94.
- Update canonical linux-oracle to version 4.15.0-1072.80.
- Update canonical linux-oracle-5.4 to version 5.4.0-1046.50~18.04.2.
- Update canonical linux-raspi-5.4 to version 5.4.0-1036.39~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1086.91.
- Update canonical linux-snapdragon to version 4.15.0-1103.112.
- Update canonical linux-aws-fips to version 4.15.0-2045.47.
- Update canonical linux-azure-fips to version 4.15.0-2027.30.
- Update canonical linux-fips to version 4.15.0-1060.68.
- Update canonical linux to version 5.4.0-74.83.
- Update canonical linux-aws to version 5.4.0-1049.51.
- Update canonical linux-aws-5.8 to version 5.8.0-1038.40~20.04.1.
- Update canonical linux-azure to version 5.4.0-1048.50.
- Update canonical linux-azure-5.8 to version 5.8.0-1036.38~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1012.15.
- Update canonical linux-gcp to version 5.4.0-1044.47.
- Update canonical linux-gcp-5.8 to version 5.8.0-1035.37~20.04.1.
- Update canonical linux-gke to version 5.4.0-1044.46.
- Update canonical linux-gkeop to version 5.4.0-1016.17.
- Update canonical linux-hwe-5.8 to version 5.8.0-59.66~20.04.1.
- Update canonical linux-kvm to version 5.4.0-1040.41.
- Update canonical linux-oem-5.10 to version 5.10.0-1025.26.
- Update canonical linux-oracle to version 5.4.0-1046.50.
- Update canonical linux-oracle-5.8 to version 5.8.0-1033.34~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1036.39.
- Update canonical linux-riscv-5.8 to version 5.8.0-29.31~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.10.38-1.
- Update linux linux_kernel to version 5.3.18 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1102.107 Fix: upgrade to 4.4.0-1102.107
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1115.128~14.04.1 Fix: upgrade to 4.15.0-1115.128~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-222.255~14.04.1 Fix: upgrade to 4.4.0-222.255~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-222.255 Fix: upgrade to 4.4.0-222.255
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1138.152 Fix: upgrade to 4.4.0-1138.152
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1103.110~16.04.1 Fix: upgrade to 4.15.0-1103.110~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1115.128~16.04.1 Fix: upgrade to 4.15.0-1115.128~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1100.113~16.04.1 Fix: upgrade to 4.15.0-1100.113~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-144.148~16.04.1 Fix: upgrade to 4.15.0-144.148~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1103.112 Fix: upgrade to 4.4.0-1103.112
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1072.80~16.04.1 Fix: upgrade to 4.15.0-1072.80~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1072.78 Fix: upgrade to 4.4.0-1072.78
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-144.148 Fix: upgrade to 4.15.0-144.148
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1103.110 Fix: upgrade to 4.15.0-1103.110
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1049.51~18.04.1 Fix: upgrade to 5.4.0-1049.51~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1115.128 Fix: upgrade to 4.15.0-1115.128
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1048.50~18.04.1 Fix: upgrade to 5.4.0-1048.50~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1022.26 Fix: upgrade to 4.15.0-1022.26
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1100.113 Fix: upgrade to 4.15.0-1100.113
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1044.47~18.04.2 Fix: upgrade to 5.4.0-1044.47~18.04.2
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 |
< 5.4.0-1044.46~18.04.1 Fix: upgrade to 5.4.0-1044.46~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1016.17~18.04.1 Fix: upgrade to 5.4.0-1016.17~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-74.83~18.04.1 Fix: upgrade to 5.4.0-74.83~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1092.94 Fix: upgrade to 4.15.0-1092.94
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1072.80 Fix: upgrade to 4.15.0-1072.80
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1046.50~18.04.2 Fix: upgrade to 5.4.0-1046.50~18.04.2
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1036.39~18.04.1 Fix: upgrade to 5.4.0-1036.39~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1086.91 Fix: upgrade to 4.15.0-1086.91
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1103.112 Fix: upgrade to 4.15.0-1103.112
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2045.47 Fix: upgrade to 4.15.0-2045.47
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2027.30 Fix: upgrade to 4.15.0-2027.30
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1060.68 Fix: upgrade to 4.15.0-1060.68
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
Showing 50 of 97. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-74.83 Fix: upgrade to 5.4.0-74.83
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1049.51 Fix: upgrade to 5.4.0-1049.51
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 |
< 5.8.0-1038.40~20.04.1 Fix: upgrade to 5.8.0-1038.40~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1048.50 Fix: upgrade to 5.4.0-1048.50
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 |
< 5.8.0-1036.38~20.04.1 Fix: upgrade to 5.8.0-1036.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1012.15 Fix: upgrade to 5.4.0-1012.15
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1044.47 Fix: upgrade to 5.4.0-1044.47
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 |
< 5.8.0-1035.37~20.04.1 Fix: upgrade to 5.8.0-1035.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1044.46 Fix: upgrade to 5.4.0-1044.46
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1016.17 Fix: upgrade to 5.4.0-1016.17
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 |
< 5.8.0-59.66~20.04.1 Fix: upgrade to 5.8.0-59.66~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1040.41 Fix: upgrade to 5.4.0-1040.41
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 |
< 5.10.0-1025.26 Fix: upgrade to 5.10.0-1025.26
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1046.50 Fix: upgrade to 5.4.0-1046.50
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 |
< 5.8.0-1033.34~20.04.1 Fix: upgrade to 5.8.0-1033.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1036.39 Fix: upgrade to 5.4.0-1036.39
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 |
< 5.8.0-29.31~20.04.1 Fix: upgrade to 5.8.0-29.31~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 5.10.38-1 Fix: upgrade to 5.10.38-1
|
| – | linux | linux_kernel |
< 5.3.18 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
32 33 34 cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:* |
| – | netapp | active_iq_unified_manager |
All versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:* |
| – | netapp | cloud_backup |
All versions
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* |
| – | netapp | solidfire_baseboard_management_controller_firmware |
All versions
cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h410c_firmware |
All versions
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h300s_firmware |
All versions
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500s_firmware |
All versions
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700s_firmware |
All versions
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h300e_firmware |
All versions
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h500e_firmware |
All versions
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h700e_firmware |
All versions
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:* |
| – | netapp | h410s_firmware |
All versions
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* |
Original advisory text
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
References
- https://ubuntu.com/security/notices/USN-4999-1 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2020-25673 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/11/01/1 Exploit Mailing List Patch Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://security.netapp.com/advisory/ntap-20210702-0008/ Third Party Advisory
- https://ubuntu.com/security/CVE-2020-25673 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/11/01/1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-4977-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4979-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4982-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5343-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-25673 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published2 Nov 2020
Updated4 Nov 2026
First seen17 Aug 2026
Track software like this
Free during beta