The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-defaultUpgrade kernel-debug-baseUpgrade kernel-vanilla-baseUpgrade kernel-vmi-baseUpgrade kernel-vmiUpgrade kernel-ec2Upgrade kernel-source-vanillaUpgrade preload-kmp-defaultUpgrade kernel-docsUpgrade kernel-vanilla-develUpgrade kernel-desktop-develUpgrade kernel-ec2-extraUpgrade kernel-default-baseUpgrade preload-kmp-desktopUpgrade kernel-desktop-baseUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-vmi-develUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-pae-develUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-desktopUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-vanillaUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-xenUpgrade kernel-pae-baseUpgrade kernel-debug | Feb 17, 2015 | Jun 8, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-3.0.0-13-virtualUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-3.0.0-13-genericUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-3.0.0-13-serverUpgrade linux-image-3.0.0-13-generic-paeUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.38-12-generic | Nov 8, 2024 | Jun 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub