The vulnerability has been deemed as critical and assigned CVE-2016-5696.
Lookout says that all Linux kernel versions between v3.6 and up to v4.7 are vulnerable.
However, Google patches dont percolate to majority of Android smartphone users due to lethargy of smartphone manufacturers.
net.ipv4.tcp_challenge_ack_limit = 999999999
Read More
source: www.techworm.net
