CVE-2011-2525 in Linux Kernel
Summary
The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
Reservation
06/15/2011
Disclosure
02/01/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60062 | Linux Kernel tc_fill_qdisc null pointer dereference | 476 | Not defined | Official fix | CVE-2011-2525 |