CVE-2011-1576 The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV)....
MediumCVSS 5.7
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.6.18 | No fix listed |
| redhat enterprise linux | = 5 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| redhat enterprise virtualization hypervisor | All versions | No fix listed |
References
- RHSA-2011:0927 vendor-advisory
- RHSA-2011:1090 vendor-advisory
- RHSA-2011:1106 vendor-advisory
- 48907 vdb-entry
- 1025853 vdb-entry
- bugzilla.redhat.com patch