CVE-2011-2942 Null dereference in n/a
Remote attackers can crash the system via a NULL pointer dereference in the Linux kernel bridge forwarding function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-2942?
CVE-2011-2942 is a medium-severity vulnerability in Linux kernel, published on 8 Jun 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.
Which versions are affected by CVE-2011-2942?
It affects 2 products.
Products include Linux kernel, Redhat Enterprise Linux.
How do I fix CVE-2011-2942?
Apply the vendor's patch.
Is CVE-2011-2942 being exploited?
There is no known exploitation of CVE-2011-2942 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-cgjv-rvfj-3vrq.