Description
The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.6.1-1 | — |
| Debian 13 | linux | 4.6.1-1 | — |
| Debian 12 | linux | 4.6.1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux | 4.4.0-42.62 | — |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1027.33 | — |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1030.33 | — |
| Ubuntu 14.04 LTS | linux | 3.13.0-98.145 | — |
| Ubuntu 14.04 LTS | linux-lts-vivid | 3.19.0-71.79~14.04.1 | — |
| Ubuntu 14.04 LTS | linux-lts-xenial | 4.4.0-42.62~14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | kernel-aarch64 +1 | 4.5.0-15.2.1.el7 | RHSA-2017:0372 |
| RHEL 7 | kernel-rt +10 | 3.10.0-327.36.3.rt56.238.el7 | RHSA-2016:2110 |
| RHEL 7 | perf +18 | 3.10.0-327.36.2.el7 | RHSA-2017:0372, RHSA-2016:2047 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7.1 EUS | kernel-kdump +4 | 3.10.0-229.46.1.el7 | RHSA-2017:0004 |
| RHEL 7.1 EUS | perf +13 | 3.10.0-229.46.1.ael7b | RHSA-2017:0004 |
| Red Hat MRG 2 | kernel-rt +10 | 1:3.10.0-327.rt56.198.el6rt | RHSA-2016:2107 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP2 | kernel-docs | 4.4.38-93.3 | SUSE-SU-2017:0181-1 |
| SLES 12 SP2 | kernel-syms +3 | 4.4.38-93.1 | SUSE-SU-2017:0181-1 |
| SLES 12 SP1 | kernel-docs | 3.12.67-60.64.18.3 | SUSE-SU-2016:2912-1 |
| SLES 12 SP1 | kernel-xen +4 | 3.12.67-60.64.18.1 | SUSE-SU-2016:2912-1 |
| SLES 12 | kernel-ec2 | 3.12.67-60.64.18.1 | SUSE-SU-2016:2912-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP2 | kernel-syms +2 | 4.4.38-93.1 | SUSE-SU-2017:0181-1 |
| SLES for SAP 12 SP1 | kernel-xen +3 | 3.12.67-60.64.18.1 | SUSE-SU-2016:2912-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_0 | 7-20.2 | SUSE-SU-2016:2631-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_1 | 7-2.1 | SUSE-SU-2016:2630-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_2 | 6-2.1 | SUSE-SU-2016:2629-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_3 | 5-2.1 | SUSE-SU-2016:2634-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_4 +2 | 4-2.1 | SUSE-SU-2016:2638-1, SUSE-SU-2016:2637-1, SUSE-SU-2016:2635-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_7 | 3-5.1 | SUSE-SU-2016:2673-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_8 | 2-2.1 | SUSE-SU-2016:2674-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP1_Update_9 | 1-6.3 | SUSE-SU-2016:2912-1 |
| SLE Live Patching 12 | kgraft-patch-SLE12-SP2_Update_4 | 1-2.1 | SUSE-SU-2017:0181-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-4.1.12-61.1.25.el6uek | 0.5.3-2.el6 | ELSA-2017-3508 |
| Oracle Linux 7 | dtrace-modules-4.1.12-61.1.25.el7uek | 0.5.3-2.el7 | ELSA-2017-3508 |
| Oracle Linux 7 | kernel-uek +5 | 4.1.12-61.1.25.el7uek | ELSA-2017-3508 |
Advisories 17
- RHSA-2017:0372 Red Hat Security Advisory: kernel-aarch64 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2017:0004 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2016:2110 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2016:2107 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2016:2047 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- SUSE-SU-2016:2635-1 Security update for Linux Kernel Live Patch 5 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2637-1 Security update for Linux Kernel Live Patch 6 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2638-1 Security update for Linux Kernel Live Patch 4 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2673-1 Security update for Linux Kernel Live Patch 7 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2912-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2630-1 Security update for Linux Kernel Live Patch 1 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2634-1 Security update for Linux Kernel Live Patch 3 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2629-1 Security update for Linux Kernel Live Patch 2 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2631-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2674-1 Security update for Linux Kernel Live Patch 8 for SLE 12 SP1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:0181-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2017-3508 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 12, 2017
References
- RHSA-2016:2107 vendor-advisory
- RHSA-2017:0372 vendor-advisory
- https://bto.bluecoat.com/security-advisory/sa134
- 93562 vdb-entry
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fac8e0f579695a3ecbc4d3cac369139d7f819971
- RHSA-2016:2047 vendor-advisory
- RHSA-2016:2110 vendor-advisory
- [oss-security] 20161013 CVE Request: another recursion in GRE mailing-list
- https://github.com/torvalds/linux/commit/fac8e0f579695a3ecbc4d3cac369139d7f819971
- RHSA-2017:0004 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1384991
- https://bugzilla.suse.com/show_bug.cgi?id=1001486