CVE-2016-7039
HighSummary
The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers.
Risk Assessment
Attackers can cause system crashes, leading to service downtime. This may affect the availability of systems and applications within the organization.
Recommendation
It is recommended to update the Linux kernel to version 4.8.3 or later to mitigate this vulnerability. Additionally, monitor network traffic for potential attacks.
Other vulnerabilities in Jądro Linux
See all- CVE-2026-43322High
A vulnerability related to use-after-free (UAF) in the le_read_features_complete function has been fixed in the Linux kernel, which could lead to memory management errors.
- CVE-2016-8666High
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking.
- CVE-2015-1465High
The IPv4 implementation in the Linux kernel before version 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups in the absence of caching, allowing remote attackers to cause a denial of service (memory consumption or system crash) via a flood of packets.
- CVE-2016-10229Critical
In the Linux kernel before version 4.5, there is a vulnerability that allows remote attackers to execute arbitrary code via UDP traffic. This issue occurs during an unsafe second checksum calculation during the execution of a recv system call with the MSG_PEEK flag.
- CVE-2000-0274Low
The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.
- CVE-2000-0227Low
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max parameter, allowing local users to cause a denial of service by requesting a large number of sockets.
Original NVD description (English source)
The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666.