CVE-2014-2309: Linux Kernel

Medium severity, CVSS 6.1. EPSS: 2.4% chance of exploitation in the next 30 days.

The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial of service (memory consumption) via a flood of ICMPv6 Router Advertisement packets.

Affected products

• Linux Linux Kernel: up to and including 3.13.6
• Opensuse Opensuse: version 11.4 only
• Suse Linux Enterprise Server: version 11 only

Published 2014-03-11. Last modified 2026-06-17.