Skip to content
OpenAdvisories
Unscored CVE-2011-1576 EUVD-2011-1577GHSA-mvmx-96hj-8h74

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise …

Published Aug 31, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 linux-2.6 2.6.32-35squeeze1 DSA-2303-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 6 perf +14 2.6.32-131.12.1.el6 RHSA-2011:1189
RHEL 5 kernel +11 2.6.18-238.19.1.el5 RHSA-2011:0927
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 6.0 EUS perf +14 2.6.32-71.34.1.el6 RHSA-2011:1106
Red Hat MRG 2 kernel-rt +10 2.6.33.9-rt31.75.el6rt RHSA-2011:1253

Advisories 5

References