7.8

CVE-2011-2525

The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.35
Redhat ≫ Enterprise Linux Version4.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.386
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://rhn.redhat.com/errata/RHSA-2011-1065.html
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53b0f08042f04813cd1a7473dacd3edfacb28eb3
http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805
Broken Link
http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35
Broken Link
http://openwall.com/lists/oss-security/2011/07/12/1
Patch
Third Party Advisory
Mailing List
http://rhn.redhat.com/errata/RHSA-2011-1163.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=720552
Patch
Third Party Advisory
Issue Tracking