Linux Kernel contains a flaw that may allow a remote denial of service. The issue is triggered when the 'igb_receive_skb 'function in 'drivers/net/igb/igb_main.c' in the Intel Gigabit Ethernet subsystem has SR-IOV and promiscuous mode enabled without any VLANs registered. This may allow a remote attacker to cause a NULL pointer dereference and panic denial of service via a VLAN tagged frame.

Upgrade to version 2.6.34 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• CVE ID: 2010-4263 (see also: NVD)
• Secunia Advisory ID: 42884 42890 43762 44774 45116 45212 46397
• Bugtraq ID: 45208
• Vendor Specific News/Changelog Entry: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=31b24b955c3ebbb6f3008a6374e61cf7c05a193c
  http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.34
  http://www.vmware.com/security/advisories/VMSA-2011-0012.html
  https://bugzilla.kernel.org/show_bug.cgi?id=15582
  https://bugzilla.redhat.com/show_bug.cgi?id=660188
  https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-July/001372.html
  https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-June/001342.html
• Other Advisory URL: http://openwall.com/lists/oss-security/2010/12/06/3
  http://openwall.com/lists/oss-security/2010/12/06/9
  http://wiki.openvz.org/Download/kernel/rhel5/028stab085.2
• Vendor Specific Advisory URL: http://www.ubuntu.com/usn/usn-1162-1/
• RedHat RHSA: RHSA-2011:0007 RHSA-2011:0017

• Krzysztof Moscicki