imPC@ndo IT

Tracker / CVE-2015-5364

CVE-2015-5364

High 7.8

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

Affected products and versions

canonical ubuntu_linux
debian debian_linux
linux linux_kernel · … → 3.2.70
linux linux_kernel · 3.11 → 3.12.44
linux linux_kernel · 3.13 → 3.14.45
linux linux_kernel · 3.15 → 3.16.35
linux linux_kernel · 3.17 → 3.18.17
linux linux_kernel · 3.19 → 4.0.6
linux linux_kernel · 3.3 → 3.4.109
linux linux_kernel · 3.5 → 3.10.81
redhat enterprise_linux_server_aus

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References