Linux Kernel xen-netback NAPI data packet processing DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel 3.13.x
Linux kernel 3.12.x
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2014-2580
 
Linux Kernel is the Kernel of the Linux operating system.
 
Linux Kernel 3.12 and later versions encounter errors when processing certain data packets in the network backend Driver (xen-netback). malicious local users can exploit this vulnerability to cause host crash through specially crafted data packets. Successful exploitation of this vulnerability requires Linux OS to be used as dom0, and netback is configured to use NAPI.
 
<* Source: T & #246; r & #246; k Edwin

Link: http://secunia.com/advisories/53612/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.kernel.org/
Http://xenbits.xenproject.org/xsa/advisory-90.html

Linux Kernel: click here
Linux Kernel: click here

The Linux kernel replaces iptables with nftables

Linux 3.12 code Suicidal Squirrel

How to install Linux 3.11 Kernel on Ubuntu

The Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5

Linux Kernel 3.4.62 LTS is now available for download

How to install Linux kernel 13.10 On Ubuntu 3.12