ArchLinux: 201612-14: linux-zen: denial of service
Summary
The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.
Resolution
Upgrade to 4.8.13-1.
# pacman -Syu "linux-zen>=4.8.13-1"
The problem has been fixed upstream in version 4.8.13.
References
https://bugzilla.kernel.org/show_bug.cgi?id=189851 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ https://access.redhat.com/security/cve/CVE-2016-9919
![Dist Arch](/images/distros/dist-arch.png)
Workaround
None.