The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo frames for a large amount of network traffic, as demonstrated by a flood ping.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-xenU-develUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-smp-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-develUpgrade kernel-hugememUpgrade kernel-hugemem-develUpgrade kernel-smpUpgrade kernelUpgrade kernel-xenUUpgrade kernel-xen-devel | Dec 1, 2016 | Oct 19, 2009 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 19, 2009 |
| Suse | — | Upgrade ib-bonding-kmp-rt_bigsmpUpgrade ofed-docUpgrade kernel-symsUpgrade ofed-kmp-rt_timingUpgrade kernel-debugUpgrade ofed-kmp-rt_bigsmpUpgrade kernel-xenUpgrade kernel-rt_debugUpgrade kernel-rt_bigsmpUpgrade kernel-sourceUpgrade kernel-rt_timingUpgrade ofed-cxgb3-NIC-kmp-rt_debugUpgrade ofed-kmp-rt_debugUpgrade ib-bonding-kmp-rt_debugUpgrade ofed-cxgb3-NIC-kmp-rtUpgrade sap-aio-releaseUpgrade kernel-rtUpgrade ofed-cxgb3-NIC-kmp-rt_bigsmpUpgrade kernel-defaultUpgrade slert-releaseUpgrade kernel-kdumpUpgrade ofedUpgrade ib-bonding-kmp-rt_timingUpgrade ofed-kmp-rtUpgrade ofed-cxgb3-NIC-kmp-rt_timingUpgrade kernel-xenpaeUpgrade kernel-smpUpgrade ib-bonding-kmp-rt | Feb 17, 2015 | Oct 19, 2009 |
| Ubuntu | — | Upgrade linux-image-2.6.31-16-386Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-16-serverUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.24-26-386Upgrade linux-image-2.6.24-26-sparc64-smpUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-26-lpiacompatUpgrade linux-image-2.6.27-16-virtualUpgrade linux-image-2.6.27-16-serverUpgrade linux-image-2.6.24-26-powerpcUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.31-16-sparc64-smpUpgrade linux-image-2.6.24-26-powerpc64-smpUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.28-17-ixp4xxUpgrade linux-image-2.6.31-16-ia64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-26-genericUpgrade linux-image-2.6.31-16-genericUpgrade linux-image-2.6.31-16-virtualUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.24-26-openvzUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.31-16-lpiaUpgrade linux-image-2.6.24-26-powerpc-smpUpgrade linux-image-2.6.24-26-sparc64Upgrade linux-image-2.6.24-26-mckinleyUpgrade linux-image-2.6.24-26-hppa64Upgrade linux-image-2.6.24-26-itaniumUpgrade linux-image-2.6.28-17-imx51Upgrade linux-image-2.6.24-26-serverUpgrade linux-image-2.6.27-16-genericUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-16-sparc64Upgrade linux-image-2.6.24-26-lpiaUpgrade linux-image-2.6.28-17-serverUpgrade usb-modules-2.6.24-26-sparc64-diUpgrade linux-image-2.6.28-17-lpiaUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.31-16-generic-paeUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.28-17-versatileUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.28-17-iop32xUpgrade linux-image-2.6.31-16-powerpc64-smpUpgrade linux-image-2.6.28-17-genericUpgrade linux-image-2.6.31-16-powerpcUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.28-17-virtualUpgrade linux-image-2.6.24-26-virtualUpgrade linux-image-2.6.31-16-powerpc-smpUpgrade linux-image-2.6.24-26-hppa32Upgrade linux-image-2.6.24-26-xenUpgrade linux-image-2.6.24-26-rtUpgrade linux-image-2.6.15-55-hppa64 | Nov 8, 2024 | Oct 19, 2009 |
| Vmsa 2010 0009 1 Service Console Update | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | Oct 19, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub