The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote attackers to cause a denial of service by sending a large amount of network traffic, related to the sk_add_backlog function and the sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4251.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-debug | Dec 1, 2016 | May 26, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 26, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 25, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.32-34-generic-pae | Nov 8, 2024 | May 26, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub