CVE-2015-5366: Medium severity Linux Linux kernel vulnerability
A flaw was found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use this flaw to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of service in applications using the edge triggered epoll functionality.
Other sources
The (1) udprecvmsg and (2) udpv6recvmsg functions in the Linux kerne ...
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.18-408.el5 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-573.3.1.el6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-358.71.1.el6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-431.72.1.el6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:2.6.32-504.49.1.el6 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-229.14.1.rt56.141.13.el7_1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-229.14.1.ael7b - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 1:3.10.0-229.rt56.161.el6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.21-1Fixed in 6.12.22-1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 3.13.0-58.97 - Upgrade
Upgrade
ubuntu/linux-lts-utopicto a version that resolves this vulnerability.Fixed in 3.16.0-44.59~14.04.1 - Upgrade
Upgrade
ubuntu/linux-lts-vividto a version that resolves this vulnerability.Fixed in 3.19.0-23.24~14.04.1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 4.0.6
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2015-5366?
CVE-2015-5366 is rated as a high severity vulnerability due to its potential to cause denial of service (DoS) through an infinite loop in the Linux kernel.
How do I fix CVE-2015-5366?
To fix CVE-2015-5366, update the Linux kernel to a version that includes the security patch for this vulnerability.
Which Linux kernel versions are affected by CVE-2015-5366?
CVE-2015-5366 affects several versions of the Linux kernel including 2.6.18-408.el5 and 3.10.0-229.14.1.rt56.141.13.el7_1.
What could an attacker achieve with CVE-2015-5366?
An attacker could leverage CVE-2015-5366 to execute a denial of service attack by sending specially crafted UDP packets with incorrect checksums.
Is there a workaround for CVE-2015-5366 if I can't update immediately?
While the best practice is to apply the security update, temporarily limiting exposure to untrusted networks or disabling UDP can serve as a workaround.