OSVDB ID: 70483 Title: Linux Kernel igb Subsystem drivers/net/igb/igb_main.c igb_receive_skb Function VLAN Tagged Frame NULL Dereference Remote DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Linux Kernel contains a flaw that may allow a remote denial of service. The issue is triggered when the 'igb_receive_skb 'function in 'drivers/net/igb/igb_main.c' in the Intel Gigabit Ethernet subsystem has SR-IOV and promiscuous mode enabled without any VLANs registered. This may allow a remote attacker to cause a NULL pointer dereference and panic denial of service via a VLAN tagged frame. |
Classification |
Location:
Remote / Network Access
Attack Type: Denial of Service Impact: Loss of Availability Solution: Upgrade Exploit: Exploit Unknown Disclosure: Vendor Verified |
Solution |
Upgrade to version 2.6.34 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
Credit |
Unknown or Incomplete |