CVE-2013-4348: The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote a...

Security readout for executives and security teams

CVE-2013-4348 is a Linux kernel denial-of-service issue. A malformed IPIP-encapsulated packet with a small IP header length value can trigger an infinite loop in packet flow dissection, potentially hanging affected systems. The bundle does not show code execution, data theft, or active exploitation. Exposure is most likely on systems running unpatched Linux kernels through 3.12 that can receive or process IPIP-encapsulated network traffic. Modern supported distributions are likely patched, but legacy appliances, embedded systems, or long-lived servers require inventory confirmation. Handle through legacy Linux risk management. This is not flagged as actively exploited, but a remote kernel denial-of-service can affect availability on exposed or network-critical systems. Prioritize unsupported or internet-facing systems first. Mitigation focus: Identify systems running Linux kernels through 3.12.; Apply the relevant vendor kernel security update.; Reboot into the fixed kernel after updating..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.