Description
Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | kernel-image-2.6.8-hppa | 2.6.8-6sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-ia64 | 2.6.8-14sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-m68k | 2.6.8-4sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-s390 | 2.6.8-5sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-image-2.6.8-sparc | 2.6.8-15sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-patch-powerpc-2.6.8 | 2.6.8-12sarge1 | DSA-922-1 |
| Debian 3.1 | kernel-source-2.6.8 +3 | 2.6.8-16sarge1 | DSA-922-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | kernel +8 | 2.6.9-34.0.1.EL | RHSA-2006:0493 |
Advisories 2
- RHSA-2006:0493 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-922-1 kernel-source-2.6.8 - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm
- RHSA-2006:0493 vendor-advisory
- 18056 third-party-advisory
- MDKSA-2007:025 vendor-advisory
- 21745 third-party-advisory
- DSA-922 vendor-advisory
- USN-219-1 vendor-advisory
- http://linux.bkbits.net:8080/linux-2.6/cset%40429a310bRFOXOmZvKaGXW8A5Qd9F1A
- 20237 third-party-advisory
- oval:org.mitre.oval:def:10157 vdb-entry signature
- 15536 vdb-entry