CVE-2011-4112

MEDIUM

Linux Kernel < 3.1 - Denial of Service via IFF_TX_SKB_SHARING Flag Misuse

Title source: llm
STIX 2.1

Description

The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.

References (6)

Core 6
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=751006
Third Party Advisory x_refsource_confirm
http://downloads.avaya.com/css/P8/documents/100156038
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/11/21/4
Mailing List, Patch, Vendor Advisory x_refsource_confirm
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1

Scores

CVSS v3 5.5
EPSS 0.0047
EPSS Percentile 38.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (7)
avaya/9608_firmware 6.0 - 6.6.0
avaya/9608g_firmware 6.0 - 6.6.0
avaya/9611g_firmware 6.0 - 6.6.0
avaya/9621g_firmware 6.0 - 6.6.0
avaya/9641g_firmware 6.0 - 6.6.0
avaya/9641gs_firmware 6.0 - 6.6.0
linux/linux_kernel < 3.1
Published May 17, 2012
Tracked Since Feb 18, 2026