CVE-2011-1576 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Kernel
Severity
5.7MEDIUMNVD
EPSS
0.8%
top 26.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 31
Latest updateMay 14
Description
The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on Red Hat Enterprise Linux 6, as used in Red Hat Enterprise Virtualization (RHEV) Hypervisor and other products, allows remote attackers to cause a denial of service via crafted VLAN packets that are processed by the napi_reuse_skb function, leading to (1) a memory leak or (2) memory corruption, a different vulnerability than CVE-2011-1478.
CVSS vector
AV:A/AC:M/C:N/I:N/A:CExploitability: 5.5 | Impact: 6.9
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-mvmx-96hj-8h74: The Generic Receive Offload (GRO) implementation in the Linux kernel 2↗2022-05-14