Description
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSG_PEEK flag.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.5.1-1 | — |
| Debian 13 | linux | 4.5.1-1 | — |
| Debian 12 | linux | 4.5.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | linux | 3.13.0-79.123 | — |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-49.55~14.04.1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | kernel-ec2 +4 | 3.12.61-52.101.1 | SUSE-SU-2017:2920-1 |
| SLES 12 | kgraft-patch-SLE12_Update_28 | 1-8.1 | SUSE-SU-2017:2920-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.3 | linux-grsec | 4.1.39-r0 | — |
Advisories 1
- SUSE-SU-2017:2920-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 97397 vdb-entry
- http://source.android.com/security/bulletin/2017-04-01.html
- https://github.com/torvalds/linux/commit/197c949e7798fbf28cfadc69d9ca0c2abbf93191
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=197c949e7798fbf28cfadc69d9ca0c2abbf93191
- 1038201 vdb-entry
- https://security.paloaltonetworks.com/CVE-2016-10229