CVE-2015-4700

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.0.6

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by creating a packet filter and loading crafted BPF instructions that trigger late convergence by the JIT compiler. The bpf int jit compile function in arch/x86/net/bpf jit comp.c is the vulnerable component.

Recommendations For Linux kernel versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue. As a temporary workaround, consider restricting the creation of packet filters to minimize the risk of exploitation.