CVE-2012-6638

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.2.24

Description The issue allows remote attackers to cause a denial of service by consuming kernel resources through a flood of SYN+FIN TCP packets. This is achieved by exploiting the tcp rcv state process function in net/ipv4/tcp input.c.

Recommendations For Linux kernel versions prior to 3.2.24, update to version 3.2.24 or later to resolve the issue. As a temporary workaround, consider implementing network traffic filtering to restrict the influx of SYN+FIN TCP packets.