Vulnetix
Try Vulnetix Request Demo
CVE-2011-2525 REJECTED

The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.

EPSS 0.12% · 30.3th percentile

Risk Scores

EPSS Score
0.12%
30.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlinux-mako0
Ubuntu:14.04:LTSlinux-grouper3.1.10-6.25, 3.1.10-7.27, 0
Ubuntu:14.04:LTSlinux-flo0
Ubuntu:14.04:LTSlinux-maguro0
Ubuntu:14.04:LTSlinux-lts-utopic0
Ubuntu:14.04:LTSlinux0
Ubuntu:14.04:LTSlinux-lts-vivid0
Ubuntu:14.04:LTSlinux-manta0
Ubuntu:14.04:LTSlinux-goldfish3.4.0-1.7, 0

Timeline

References

Open in Interactive Console →