The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message, as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value, a different vulnerability than CVE-2010-3880.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2011-08-29T18:00:00

Updated: 2024-08-06T22:53:17.439Z

Reserved: 2011-05-31T00:00:00

Link: CVE-2011-2213

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-08-29T18:55:01.220

Modified: 2024-11-21T01:27:49.763

Link: CVE-2011-2213

cve-icon Redhat

Severity : Moderate

Publid Date: 2011-06-01T00:00:00Z

Links: CVE-2011-2213 - Bugzilla