The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernelUpgrade kernel-debug | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 2, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2010 |
| Suse | — | Upgrade kernel-iseries64Upgrade kernel-debugUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-desktop-baseUpgrade kernel-desktopUpgrade kernel-xen-develUpgrade kernel-vmipaeUpgrade kernel-pae-develUpgrade kernel-ec2-extraUpgrade kernel-ec2Upgrade kernel-kdumppaeUpgrade kernel-traceUpgrade kernel-xenpaeUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-ec2-develUpgrade kernel-debug-baseUpgrade kernel-vmi-develUpgrade kernel-symsUpgrade kernel-bigsmpUpgrade kernel-trace-baseUpgrade kernel-vanilla-develUpgrade preload-kmp-desktopUpgrade kernel-kdumpUpgrade kernel-smpUpgrade kernel-paeUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-vmi-baseUpgrade kernel-desktop-develUpgrade kernel-xenUpgrade kernel-vmiUpgrade kernel-ppc64Upgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade preload-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-devel | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.32-36-serverUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.32-340-ec2Upgrade linux-image-2.6.32-36-versatileUpgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.32-36-genericUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.32-36-lpiaUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-36-powerpc64-smpUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-36-sparc64Upgrade linux-image-2.6.32-36-preemptUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.32-36-powerpc-smpUpgrade linux-image-2.6.32-36-sparc64-smpUpgrade linux-image-2.6.32-36-generic-paeUpgrade linux-image-2.6.32-36-386Upgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.32-420-doveUpgrade linux-image-2.6.32-36-powerpcUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-36-ia64Upgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.32-36-virtual | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub