CVE-2017-6214: The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to...

Security readout for executives and security teams

CVE-2017-6214 is a Linux kernel TCP denial-of-service flaw. A crafted TCP packet with the URG flag can make vulnerable kernels loop and soft-lock, disrupting availability. Sources identify Linux kernels before 4.9.11 and vendor updates from Android, Red Hat, and Debian. No source here shows active exploitation. Exposure is most likely on systems running Linux kernels before 4.9.11 or vendor kernels missing the relevant backport. Internet-facing or untrusted-network TCP services have higher operational risk because the trigger is remote network traffic, but the source bundle does not identify specific product configurations beyond vendor advisories. Prioritize remediation for internet-facing Linux systems and critical services where downtime has business impact. This is availability-focused, not data theft based on supplied sources, but a remotely triggerable kernel soft lockup can still cause meaningful outage risk. Mitigation focus: Apply vendor kernel updates that include the CVE-2017-6214 fix.; Use supported Android, Red Hat, or Debian advisories where applicable.; Confirm kernels include the upstream ccf7abb93af09ad0868ae9033d1ca8108bdaec82 fix or vendor backport..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.