CVE-2013-4470: The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize...

Security readout for executives and security teams

CVE-2013-4470 is an old Linux kernel flaw in UDP Fragmentation Offload handling. A local user or local workload could trigger kernel memory corruption, causing a system crash and possibly privilege escalation. It matters most for legacy Linux systems or appliances still running kernels before 3.12 or vendor kernels that lack the listed fixes. Exposure is mainly legacy Linux systems, embedded products, appliances, or long-lived distro kernels that did not receive the relevant backported vendor fixes. The attacker position is local user or local code execution, not unauthenticated remote network access based on the provided sources. Treat this as a legacy-kernel hygiene issue with elevated priority on shared or multi-tenant Linux systems. It is not shown as actively exploited in the provided sources, but kernel crashes and possible local privilege escalation can create serious business impact where old systems remain in production. Mitigation focus: Upgrade to a vendor-supported kernel containing the upstream fixes.; Prioritize systems running Linux kernels before 3.12 or unfixed vendor backports.; Review Ubuntu, Red Hat, and SUSE advisories for affected package versions..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.