CVE-2015-5366: Medium severity linux kernel vulnerability
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in applications using the edge triggered epoll functionality.
Other sources
The (1) udprecvmsg and (2) udpv6recvmsg functions in the Linux kerne ...
— Debian
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2015-5366?
CVE-2015-5366 is rated as a high severity vulnerability due to its potential to cause denial of service (DoS) through an infinite loop in the Linux kernel.
How do I fix CVE-2015-5366?
To fix CVE-2015-5366, update the Linux kernel to a version that includes the security patch for this vulnerability.
Which Linux kernel versions are affected by CVE-2015-5366?
CVE-2015-5366 affects several versions of the Linux kernel including 2.6.18-408.el5 and 3.10.0-229.14.1.rt56.141.13.el7_1.
What could an attacker achieve with CVE-2015-5366?
An attacker could leverage CVE-2015-5366 to execute a denial of service attack by sending specially crafted UDP packets with incorrect checksums.
Is there a workaround for CVE-2015-5366 if I can't update immediately?
While the best practice is to apply the security update, temporarily limiting exposure to untrusted networks or disabling UDP can serve as a workaround.