The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-docUpgrade kernel-xen | Dec 1, 2016 | Feb 1, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Feb 2, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2010 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-smpUpgrade kernel-defaultUpgrade kernel-kdumpUpgrade preload-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-desktop-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-vmiUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade preload-kmp-desktopUpgrade kernel-vmi-baseUpgrade kernel-debug-develUpgrade kernel-kdumppaeUpgrade kernel-desktopUpgrade kernel-xenpaeUpgrade kernel-ec2-baseUpgrade kernel-vmi-develUpgrade kernel-vmipaeUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-traceUpgrade kernel-desktop-baseUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-bigsmpUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-iseries64Upgrade kernel-pae-develUpgrade kernel-debug-baseUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-ec2 | Feb 17, 2015 | Feb 1, 2012 |
| Ubuntu | — | Upgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.32-340-ec2Upgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.32-36-genericUpgrade linux-image-2.6.31-611-imx51Upgrade linux-image-2.6.32-36-powerpc64-smpUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-36-lpiaUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.32-36-versatileUpgrade linux-image-2.6.32-36-serverUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.32-36-virtualUpgrade linux-image-2.6.32-36-386Upgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-36-powerpcUpgrade linux-image-2.6.32-36-preemptUpgrade linux-image-2.6.32-36-sparc64Upgrade linux-image-2.6.32-36-ia64Upgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.32-36-generic-paeUpgrade linux-image-2.6.32-420-doveUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.32-36-sparc64-smpUpgrade linux-image-2.6.32-36-powerpc-smp | Nov 8, 2024 | Feb 2, 2012 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 1, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub