Description
include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) by sending invalid packets to a VxLAN interface.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | perf +16 | 2.6.32-431.29.2.el6 | RHSA-2014:1167 |
| RHEL 6 | rhev-hypervisor6 | 6.5-20140821.1.el6ev | RHSA-2014:1168 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | dtrace-modules-3.8.13-44.1.3.el6uek | 0.4.3-4.el6 | ELSA-2014-3081 |
| Oracle Linux 7 | dtrace-modules-3.8.13-44.1.3.el7uek | 0.4.3-4.el7 | ELSA-2014-3081 |
| Oracle Linux 7 | kernel-uek +5 | 3.8.13-44.1.3.el7uek | ELSA-2014-3081 |
Advisories 3
- RHSA-2014:1168 Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2014:1167 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- ELSA-2014-3081 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 17, 2014
References
- http://mirror.linux.org.au/linux/kernel/v2.6/ChangeLog-2.6.36
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=256df2f3879efdb2e9808bdb1b54b16fbb11fa38
- 69721 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1114540
- https://github.com/torvalds/linux/commit/256df2f3879efdb2e9808bdb1b54b16fbb11fa38