Linux Kernel IGB Panic VLAN Packet Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Debian Linux 4.0 x
Linux kernel 2.6.11.11-2.6.37
Ubuntu Linux 6.06 LTS amd64-8.04 LTS spar
Description:
--------------------------------------------------------------------------------
Linux Kernel is the Kernel used by open source Linux.

Linux Kernel has a vulnerability in implementation. Attackers can exploit this vulnerability to cause a Kernel crash and refuse to serve legitimate users.

This vulnerability is caused by no VLAN filtering and cannot process the NULL pointer reference of the Kernel located in 0000000000000028.

<* Source: Krzysztof Moscicki

Link: https://bugzilla.kernel.org/show_bug.cgi? Id = 15582

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.kernel.org/