[LZ2DMV]

Only if the machine is directly connected to the internet and the malicious packet doesn't hit a firewall somewhere along the path.

Most laptops connected to Wi-Fi are indeed connected to an AP or a SOHO router that does NAT, so the attacker won't be able to directly reach it and this is a requirement for this to work.

[jonatanheyman]

The attacker can be on the LAN though.

[EasyMark]

Sure but security isn’t about being 100% protected which is impossible, but lowering your attack foot print. Unless you have a ton of people hooking to your LAN regularly then this still greatly lowers you chances of getting hit with this particular security flaw by people on the WAN

[WhyNotHugo]

Plenty of laptops have a built in modem and this is becoming more ckmmoj every day. Those connect directly to the internet.

NAT only makes a difference if you use. IPv4 only. If you have dual stack, then your host is on the public internet.