CVE-2015-5366: The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate...

Security readout for executives and security teams

This is a Linux kernel availability bug in UDP handling. A remote attacker could send malformed UDP traffic that causes some epoll edge-triggered applications to stop receiving reads, creating an application-level denial of service. The source bundle does not show data theft, privilege escalation, or active exploitation. Exposure is most likely on Linux systems running affected pre-4.0.6 upstream kernels or vulnerable vendor backports, especially hosts running UDP services that rely on edge-triggered epoll. The bundle does not provide a complete affected product matrix. Prioritize patching internet-facing UDP workloads and shared Linux infrastructure during the normal vulnerability maintenance window. Escalate faster where critical business services depend on UDP availability or legacy kernels remain in use. Mitigation focus: Apply kernel updates from the relevant Linux vendor advisory.; Reboot systems so the fixed kernel is actually running.; Upgrade unsupported legacy kernels to a maintained vendor-supported kernel..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.