Title: Linux Kernel igb Subsystem drivers/net/igb/igb_main.c igb_receive_skb Function VLAN Tagged Frame NULL Dereference Remote DoS
Mar 19, 2010
Mar 23, 2010
Linux Kernel contains a flaw that may allow a remote denial of service. The issue is triggered when the 'igb_receive_skb 'function in 'drivers/net/igb/igb_main.c' in the Intel Gigabit Ethernet subsystem has SR-IOV and promiscuous mode enabled without any VLANs registered. This may allow a remote attacker to cause a NULL pointer dereference and panic denial of service via a VLAN tagged frame.
Remote / Network Access
Loss of Availability
Upgrade to version 2.6.34 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.