The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-xen | Dec 1, 2016 | Sep 6, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Sep 6, 2011 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-vanilla-develUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade preload-kmp-desktopUpgrade kernel-trace-baseUpgrade kernel-source-vanillaUpgrade kernel-vmiUpgrade kernel-debug-develUpgrade kernel-ec2-extraUpgrade kernel-trace-develUpgrade kernel-desktop-develUpgrade kernel-debugUpgrade preload-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-desktop-baseUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-vmi-baseUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade kernel-ec2-baseUpgrade kernel-desktopUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-ec2-develUpgrade kernel-vmi-develUpgrade kernel-pae-devel | Feb 17, 2015 | Sep 6, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.38-12-omapUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.38-12-powerpc64-smpUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.38-12-versatileUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-12-powerpcUpgrade linux-image-2.6.38-12-powerpc-smpUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.31-611-imx51 | Nov 8, 2024 | Sep 6, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub