Description
An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | kernel 4.12-rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 4.12.6-1 | — |
| Debian 13 | linux | 4.12.6-1 | — |
| Debian 12 | linux | 4.12.6-1 | — |
| Debian 9 | linux | 4.9.240-1 | DLA-2420-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +2 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +8 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-snapdragon | 4.15.0-1053.57 | — |
| Ubuntu 16.04 LTS | linux | 4.4.0-187.217 | — |
| Ubuntu 16.04 LTS | linux-aws | 4.4.0-1112.124 | — |
| Ubuntu 16.04 LTS | linux-azure | 4.13.0-1005.7 | — |
| Ubuntu 16.04 LTS | linux-gcp | 4.13.0-1002.5 | — |
| Ubuntu 16.04 LTS | linux-hwe | 4.13.0-32.35~16.04.1 | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu 16.04 LTS | linux-kvm | 4.4.0-1078.85 | — |
| Ubuntu 16.04 LTS | linux-raspi2 | 4.4.0-1137.146 | — |
| Ubuntu 16.04 LTS | linux-snapdragon | 4.4.0-1141.149 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1044.49 | — |
| Ubuntu Pro 14.04 LTS | linux | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1076.80 | — |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-187.217~14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | kernel-rt +10 | 3.10.0-1160.rt56.1131.el7 | RHSA-2020:4062 |
| RHEL 7 | perf +18 | 3.10.0-1160.el7 | RHSA-2020:4060 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | kernel-syms +2 | 4.4.180-94.150.1 | SUSE-SU-2021:3935-1 |
| SLES 12 SP3 | kgraft-patch-SLE12-SP3_Update_41 | 1-4.3.1 | SUSE-SU-2021:3935-1 |
| SLES 12 SP2 | kernel-syms +2 | 4.4.121-92.161.1 | SUSE-SU-2021:3929-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | kernel-syms +2 | 4.4.180-94.150.1 | SUSE-SU-2021:3935-1 |
| SLES for SAP 12 SP3 | kgraft-patch-SLE12-SP3_Update_41 | 1-4.3.1 | SUSE-SU-2021:3935-1 |
| SUSE OpenStack Cloud Crowbar 8 | kernel-syms +2 | 4.4.180-94.150.1 | SUSE-SU-2021:3935-1 |
| SUSE OpenStack Cloud Crowbar 8 | kgraft-patch-SLE12-SP3_Update_41 | 1-4.3.1 | SUSE-SU-2021:3935-1 |
| SUSE OpenStack Cloud 8 | kernel-syms +2 | 4.4.180-94.150.1 | SUSE-SU-2021:3935-1 |
| SUSE OpenStack Cloud 8 | kgraft-patch-SLE12-SP3_Update_41 | 1-4.3.1 | SUSE-SU-2021:3935-1 |
| SUSE HPE Helion OpenStack 8 | kernel-syms +2 | 4.4.180-94.150.1 | SUSE-SU-2021:3935-1 |
| SUSE HPE Helion OpenStack 8 | kgraft-patch-SLE12-SP3_Update_41 | 1-4.3.1 | SUSE-SU-2021:3935-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | kernel-uek +5 | 4.1.12-124.46.3.el7uek | ELSA-2021-9002 |
| Oracle Linux 7 | perf +12 | 3.10.0-1160.el7 | ELSA-2020-4060 |
Advisories 9
- RHSA-2020:4062 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2020:4060 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- DLA-2420-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2021:3929-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3935-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-24-074-07 Siemens SIMATIC CISA ICS & IT advisories · Mar 14, 2024
- SSA-770721 SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2 Siemens ProductCERT · Mar 12, 2024
- ELSA-2021-9002 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jan 7, 2021
- ELSA-2020-4060 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020