CVE-2016-10229

Critical

Published: 04/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In the Linux kernel before version 4.5, there is a vulnerability that allows remote attackers to execute arbitrary code via UDP traffic. This issue occurs during an unsafe second checksum calculation during the execution of a recv system call with the MSG_PEEK flag.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious threat to the integrity and confidentiality of systems running the vulnerable kernel version.

Recommendation

It is recommended to update the Linux kernel to version 4.5 or later to mitigate this vulnerability and to monitor UDP traffic for potential attacks.

Original NVD description (English source)

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.