CVE-2012-6638: The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote...

Security readout for executives and security teams

CVE-2012-6638 is a Linux kernel denial-of-service issue. A remote attacker could waste kernel resources by sending large volumes of unusual TCP traffic. The public record names Linux kernels before 3.2.24, but gives no CVSS score and no evidence of active exploitation. Exposure is most likely on internet-facing or untrusted-network Linux systems running kernels older than 3.2.24, unless a distribution backported the upstream fix. Current supported distributions are unlikely to remain exposed, but legacy appliances and embedded systems need checking. Prioritize legacy and internet-facing Linux assets. This is not presented as actively exploited, but it can affect service availability and may be difficult to mitigate on old appliances without vendor support. Mitigation focus: Upgrade to Linux kernel 3.2.24 or a vendor-supported kernel containing the fix.; Check distribution advisories for backported fixes before relying on upstream version numbers.; Review vendor guidance for legacy appliances or embedded Linux systems..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.