CVE-2011-1581: Input Validation
First published: Wed Apr 13 2011(Updated: )
Backport of upstream commit: fd0e435b0fe85622f167b84432552885a4856ac8 bonding: Incorrect TX queue offset By default bonding only allocates 16 queues. This patch will prevent devices that have more than 16 receive queues (82599 has 128) from blowing out the tx queue index for the bonding device. For proper queue allocation, in the bonding driver and down to the devices, they should probably add the following line to one of the files in /etc/modprobe.d/ options bonding tx_queues=N where N>= number of processors that show up in /proc/cpuinfo.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | <2.6.39 | |
| debian/linux-2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=696029
- http://securitytracker.com/id?1025558
- http://openwall.com/lists/oss-security/2011/04/13/4
- http://openwall.com/lists/oss-security/2011/04/13/16
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fd0e435b0fe85622f167b84432552885a4856ac8
- https://launchpad.net/bugs/cve/CVE-2011-1581
- https://rhn.redhat.com/errata/RHSA-2011-0542.html
- https://security-tracker.debian.org/tracker/CVE-2011-1581
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1581
- https://nvd.nist.gov/vuln/detail/CVE-2011-1581
- https://ubuntu.com/security/CVE-2011-1581
- collector/nvd-historical
- collector/nvd-index
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1581
- agent/type
- agent/author
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- agent/description
- agent/weakness
- agent/remedy
- agent/severity
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- collector/usn-cve
- source/Ubuntu
- vendor/linux
- canonical/linux linux kernel
- package-manager/debian