CVE-2017-6214

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.11

Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and soft lockup. This can be achieved via vectors involving a TCP packet with the URG flag. The tcp splice read function in net/ipv4/tcp.c is the vulnerable component.

Recommendations For Linux kernel versions prior to 4.9.11, update to version 4.9.11 or later to resolve the issue. As a temporary workaround, consider restricting the handling of TCP packets with the URG flag to minimize the risk of exploitation.