CVE-2011-2942 Null dereference in n/a

Medium 6.8 Published Updated

Remote attackers can crash the system via a NULL pointer dereference in the Linux kernel bridge forwarding function.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2011-2942?

CVE-2011-2942 is a medium-severity vulnerability in Linux kernel, published on 8 Jun 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by leveraging connectivity to a network interface that uses an Ethernet bridge device.

Which versions are affected by CVE-2011-2942?

It affects 2 products.

Products include Linux kernel, Redhat Enterprise Linux.

How do I fix CVE-2011-2942?

Apply the vendor's patch.

Is CVE-2011-2942 being exploited?

There is no known exploitation of CVE-2011-2942 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as GHSA-cgjv-rvfj-3vrq.

Is CVE-2011-2942 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free