The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for packets with tunnel stacking, as demonstrated by interleaved IPv4 headers and GRE headers, a related issue to CVE-2016-7039.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Nov 11, 2016 | Oct 16, 2016 |
| Centos_linux | — | Upgrade kernel | Oct 19, 2017 | Oct 11, 2016 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 16, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Nov 30, 2017 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2017 | Oct 13, 2016 |
| Redhat_linux | — | Upgrade kernel | Jan 4, 2017 | Oct 16, 2016 |
| Suse | — | Upgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-default | Oct 21, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-lts-vividUpgrade linux-lts-xenialUpgrade linux-raspi2Upgrade linuxUpgrade linux-snapdragonUpgrade linux-lts-trusty | Nov 19, 2024 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub