Linux Kernel 'sk_dst_get()' Denial of Service Vulnerability

Bugtraq ID:	72435
Class:	Unknown
CVE:	CVE-2015-1465
Remote:	Yes
Local:	No
Published:	Feb 02 2015 12:00AM
Updated:	Jul 31 2017 11:08AM
Credit:	Marcelo Ricardo Leitner of Red Hat.
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 S.u.S.E. openSUSE 13.2 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Linux kernel 3.18.2 Linux kernel 3.18.1 Linux kernel 3.17.4 Linux kernel 3.17.2 Linux kernel 3.16.2 Linux kernel 3.16.1 Linux kernel 3.19-rc2 Linux kernel 3.19 Linux kernel 3.18 Linux kernel 3.17.6 Linux kernel 3.17-rc3 Linux kernel 3.17 Linux kernel 3.16.6 Linux kernel 3.16 IBM PowerKVM 2.1 Google Pixel C 0 Google Nexus Player 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Nexus 5 Google Android One 0
Not Vulnerable:	Linux kernel 3.19-rc7

Linux Kernel 'sk_dst_get()' Denial of Service Vulnerability

The Linux Kernel is prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow an attacker to crash the kernel, resulting in a denial-of-service condition.

Linux Kernel 'sk_dst_get()' Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linux Kernel 'sk_dst_get()' Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Linux Kernel 'sk_dst_get()' Denial of Service Vulnerability

References:

• ipv4: try to cache dst_entries which would cause a redirect (Linux)
  
• kernel: net: DoS due to routing packets to too many different dsts/too fast (Marcelo Ricardo Leitner)
  
• Linux kernel Homepage (kernel.org)
  
• Android Security Bulletin�??September 2016 (Google)
  
• Security Bulletin: Multiple Kernel vulnerabilities affect PowerKVM (Multiple CVE (IBM)