CVE-2011-2525NULL Pointer Dereference in Kernel

Severity
7.8HIGHNVD
EPSS
0.1%
top 69.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 2
Latest updateMay 13

Description

The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

NVDlinux/linux_kernel< 2.6.35
Ubuntulinux/linux_kernel< 3.11.0-12.19

Also affects: Enterprise Linux 4.0

Patches

🔴Vulnerability Details

2
GHSA
GHSA-4hrf-7c2r-c5x7: The qdisc_notify function in net/sched/sch_api2022-05-13
OSV
CVE-2011-2525: The qdisc_notify function in net/sched/sch_api2011-10-06

📋Vendor Advisories

7
Ubuntu
Linux kernel vulnerabilities2011-12-03
Ubuntu
Linux kernel (Marvell DOVE) vulnerabilities2011-11-21
Ubuntu
Linux kernel (EC2) vulnerabilities2011-11-21
Ubuntu
Linux kernel vulnerabilities2011-11-21
Ubuntu
Linux kernel (Natty backport) vulnerabilities2011-11-09

💬Community

2
Bugzilla
CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify() [fedora-all]2011-10-25
Bugzilla
CVE-2011-2525 kernel: kernel: net_sched: fix qdisc_notify()2011-07-12