CVE-2015-8787: The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows...

Security readout for executives and security teams

This is an old Linux kernel flaw that could let a remote sender crash an affected system under specific network-interface conditions. The business risk is mainly service outage, not confirmed data theft. Systems on vendor-supported kernels are likely patched, but legacy Linux hosts should be checked. Exposure is most plausible on legacy Linux systems running kernels before 4.4 or unpatched vendor backports, especially where IPv4 traffic can reach interfaces using affected netfilter NAT redirect handling. Handle through legacy Linux risk management. This is not a current KEV-backed emergency, but unpatched exposed systems could suffer remote outages and should be remediated during normal vulnerability cycles. Mitigation focus: Inventory Linux systems running kernels before 4.4 or equivalent vendor backport levels.; Apply vendor kernel updates from Ubuntu, Fedora, Oracle, SUSE, or the relevant distribution.; Prioritize internet-facing or packet-forwarding systems using netfilter/NAT redirect behavior..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.