GRO Packet of Death Vulnerability in Linux Kernel 5.x

GRO Packet of Death Vulnerability in Linux Kernel 5.x

CVE-2019-11683 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.