CVE-2015-1465
HighSummary
The IPv4 implementation in the Linux kernel before version 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, allowing remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the system, leading to service availability issues. This can have serious consequences for the organization, including financial and reputational losses.
Recommendation
It is recommended to update the Linux kernel to version 3.18.8 or later to mitigate this vulnerability. Additionally, monitoring network traffic for potential attacks is advisable.
Other vulnerabilities in Jądro Linux
See all- CVE-2026-43322High
A vulnerability related to use-after-free (UAF) in the le_read_features_complete function has been fixed in the Linux kernel, which could lead to memory management errors.
- CVE-2016-8666High
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking.
- CVE-2016-7039High
The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers.
- CVE-2016-10229Critical
In the Linux kernel before version 4.5, there is a vulnerability that allows remote attackers to execute arbitrary code via UDP traffic. This issue occurs during an unsafe second checksum calculation during the execution of a recv system call with the MSG_PEEK flag.
- CVE-2000-0274Low
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
- CVE-2000-0227Low
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, allowing local users to cause a denial of service by requesting a large number of sockets.
Original NVD description (English source)
The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, which allows remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.