Description
net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with disallowed port numbers.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 3.16.7-ckt4-1 | — |
| Debian 13 | linux | 3.16.7-ckt4-1 | — |
| Debian 12 | linux | 3.16.7-ckt4-1 | — |
| Debian 7 | linux | 3.2.65-1+deb7u2 | DSA-3170-1 |
| Debian 6.0 | linux-2.6 | 2.6.32-48squeeze11 | DLA-155-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-riscv +6 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +4 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +3 | No fix yet | — |
| Ubuntu 14.04 LTS | linux | 3.13.0-46.75 | USN-2516-1 |
| Ubuntu 14.04 LTS | linux-lts-utopic | 3.16.0-31.41~14.04.1 | USN-2517-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | perf +17 | 3.10.0-229.el7 | RHSA-2015:0290 |
| RHEL 6 | perf +16 | 2.6.32-504.12.2.el6 | RHSA-2015:0674 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6.5 EUS | perf +16 | 2.6.32-431.50.1.el6 | RHSA-2015:0284 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | kernel-docs | 3.12.38-44.5 | SUSE-SU-2015:0529-1 |
| SLES 12 | kernel-ec2 +5 | 3.12.38-44.1 | SUSE-SU-2015:0529-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 | kernel-xen +3 | 3.12.38-44.1 | SUSE-SU-2015:0529-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12_Update_3 | 1-2.2 | SUSE-SU-2015:0529-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-3.8.13-55.1.8.el6uek | 0.4.3-4.el6 | ELSA-2015-3013 |
| Oracle Linux 7 | dtrace-modules-3.8.13-55.1.8.el7uek | 0.4.3-4.el7 | ELSA-2015-3013 |
| Oracle Linux 7 | kernel-uek +5 | 3.8.13-55.1.8.el7uek | ELSA-2015-3013 |
| Oracle Linux 7 | perf +11 | 3.10.0-229.el7 | ELSA-2015-0290 |
Advisories 10
- RHSA-2015:0674 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2015:0284 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2015:0290 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2516-1 linux vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- DSA-3170-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-155-1 linux-2.6 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2517-1 linux-lts-utopic vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:0529-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2015-3013 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 13, 2015
- ELSA-2015-0290 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 11, 2015
References
- USN-2515-1 vendor-advisory
- DSA-3170 vendor-advisory
- https://github.com/torvalds/linux/commit/db29a9508a9246e77087c5531e45b2c88ec6988b
- SUSE-SU-2015:0736 vendor-advisory
- 72061 vdb-entry
- SUSE-SU-2015:0652 vendor-advisory
- USN-2514-1 vendor-advisory
- USN-2518-1 vendor-advisory
- MDVSA-2015:057 vendor-advisory
- RHSA-2015:0290 vendor-advisory
- MDVSA-2015:058 vendor-advisory
- [netfilter-devel] 20140925 [PATCH nf] netfilter: conntrack: disable generic protocol tracking mailing-list
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=db29a9508a9246e77087c5531e45b2c88ec6988b
- https://bugzilla.redhat.com/show_bug.cgi?id=1182059
- RHSA-2015:0284 vendor-advisory
- [oss-security] 20150114 CVE-2014-8160 Linux Kernel: SCTP firewalling fails until SCTP module is loaded mailing-list
- SUSE-SU-2015:0529 vendor-advisory
- USN-2517-1 vendor-advisory
- openSUSE-SU-2015:0714 vendor-advisory
- USN-2516-1 vendor-advisory
- USN-2513-1 vendor-advisory
- RHSA-2015:0674 vendor-advisory