The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUpgrade kernelUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-devel | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 2, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2010 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-ppc64Upgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade preload-kmp-defaultUpgrade preload-kmp-desktopUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-desktop-develUpgrade kernel-smpUpgrade kernel-default-baseUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-vmiUpgrade kernel-vmi-baseUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-debug-baseUpgrade kernel-symsUpgrade kernel-desktopUpgrade kernel-ec2-baseUpgrade kernel-bigsmpUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kernel-ec2-extraUpgrade kernel-kdumppaeUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-vmi-develUpgrade kernel-ec2-develUpgrade kernel-debugUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-desktop-baseUpgrade kernel-xenpaeUpgrade kernel-iseries64Upgrade kernel-pae-baseUpgrade kernel-vmipaeUpgrade kernel-pae-devel | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-36-virtualUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.32-36-ia64Upgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.32-36-powerpc-smpUpgrade linux-image-2.6.32-36-sparc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-36-386Upgrade linux-image-2.6.32-36-preemptUpgrade linux-image-2.6.32-36-generic-paeUpgrade linux-image-2.6.32-36-powerpcUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-36-sparc64Upgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-420-doveUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-36-serverUpgrade linux-image-2.6.32-36-powerpc64-smpUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.32-36-versatileUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-340-ec2Upgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.32-36-genericUpgrade linux-image-2.6.32-36-lpiaUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.24-30-sparc64-smp | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub