The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAE | Dec 1, 2016 | Oct 23, 2011 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Oct 23, 2011 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade kernel-trace-baseUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-trace-develUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-default-manUpgrade kernel-source | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.35-30-virtualUpgrade linux-image-2.6.32-32-386Upgrade linux-image-2.6.35-30-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.32-217-doveUpgrade linux-image-2.6.32-417-doveUpgrade linux-image-2.6.32-316-ec2Upgrade linux-image-2.6.35-30-omapUpgrade linux-image-2.6.35-30-powerpc-smpUpgrade linux-image-2.6.32-32-virtualUpgrade linux-image-2.6.31-610-imx51Upgrade linux-image-2.6.32-32-serverUpgrade linux-image-2.6.35-30-generic-paeUpgrade linux-image-2.6.32-32-versatileUpgrade linux-image-2.6.32-32-preemptUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.32-32-generic-paeUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-32-sparc64-smpUpgrade linux-image-2.6.32-32-sparc64Upgrade linux-image-2.6.35-30-serverUpgrade linux-image-2.6.35-30-powerpc64-smpUpgrade linux-image-2.6.35-30-versatileUpgrade linux-image-2.6.32-32-genericUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.32-32-ia64Upgrade linux-image-2.6.32-32-powerpcUpgrade linux-image-2.6.32-32-powerpc64-smpUpgrade linux-image-2.6.35-30-genericUpgrade linux-image-2.6.32-32-powerpc-smpUpgrade linux-image-2.6.32-32-lpia | Nov 8, 2024 | Oct 23, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 23, 2011 | Oct 23, 2011 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub