CVE-2011-2213

Published: Aug 29, 2011Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.

Affected (6)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux Aus, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux Server, Enterprise Linux Workstation

1 product

5 products

Enterprise Linux Aus

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.39.3

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Aus	Version 5.6
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Eus	Version 5.6
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Workstation	Version 5.0

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (26)

http://article.gmane.org/gmane.linux.network/197206

Source: secalert@redhat.com

Broken Link

http://article.gmane.org/gmane.linux.network/197208

Source: secalert@redhat.com

Broken Link

http://article.gmane.org/gmane.linux.network/197386

Source: secalert@redhat.com

Broken Link

http://article.gmane.org/gmane.linux.network/198809

Source: secalert@redhat.com

Broken Link

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=139447903326211&w=2

Source: secalert@redhat.com

Third Party Advisory

http://patchwork.ozlabs.org/patch/100857/

Source: secalert@redhat.com

PatchThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-0927.html

Source: secalert@redhat.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3

Source: secalert@redhat.com

Broken Link

http://www.openwall.com/lists/oss-security/2011/06/20/1

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/20/13

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/20/16

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=714536

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://article.gmane.org/gmane.linux.network/197206

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://article.gmane.org/gmane.linux.network/197208

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://article.gmane.org/gmane.linux.network/197386

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://article.gmane.org/gmane.linux.network/198809

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=eeb1497277d6b1a0a34ed36b97e18f2bd7d6de0d

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=139447903326211&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://patchwork.ozlabs.org/patch/100857/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-0927.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.3

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.openwall.com/lists/oss-security/2011/06/20/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/20/13

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2011/06/20/16

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=714536

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.