CVE-2015-5364

N/A
Published: August 31, 2015 at 10:00 AM UTC
Updated: June 17, 2026 at 12:29 AM UTC
4 products affected across 4 vendorsLinux KernelDebian LinuxUbuntu Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%

Description

The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect checksums within a UDP packet flood.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 3.2.703.11 ≤ v < 3.12.443.13 ≤ v < 3.14.453.15 ≤ v < 3.16.353.17 ≤ v < 3.18.173.19 ≤ v < 4.0.63.3 ≤ v < 3.4.1093.5 ≤ v < 3.10.81
Affected range stops below 3.10.81, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.12.44, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.14.45, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.16.35, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.18.17, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.2.70, so it looks safe — our inference, not a vendor statement
Affected range stops below 3.4.109, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.0.6, so it looks safe — our inference, not a vendor statement

References (38)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00023.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00049.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00011.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00004.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00007.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00008.html

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card