The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 21, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.35-32-omap | Nov 8, 2024 | Jun 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub