CVE-2013-6431: The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement e...

Security readout for executives and security teams

This is a local Linux kernel denial-of-service flaw. A user or process with CAP_NET_ADMIN could trigger an IPv6 route operation that crashes the system. The business impact is host availability, not confirmed data theft or remote compromise. Likely exposure is Linux systems running kernels before 3.11.5, or vendor kernels without the relevant backport, where local users or services have CAP_NET_ADMIN. The provided sources do not identify specific affected distributions beyond cited vendor advisories. Address during normal kernel maintenance, with faster action for shared infrastructure or environments granting CAP_NET_ADMIN broadly. The risk is a system crash caused by a local privileged capability, not a confirmed remote takeover. Mitigation focus: Upgrade to Linux 3.11.5 or a vendor kernel containing the fix.; Apply applicable Red Hat or openSUSE security advisories where relevant.; Review vendor guidance for backported fixes on maintained distribution kernels..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.