CVE-2011-1598: Null Pointer Dereference
CVE-2011-1598 Reported by Dave Jones. We can get here with a NULL socket argument passed from userspace, so we need to handle it accordingly.
can/bcm release: http://permalink.gmane.org/gmane.linux.network/192898
CVE-2011-1748 Reported by Oliver Hartkopp; can/raw release:
can/raw release: http://permalink.gmane.org/gmane.linux.network/192974
Other sources
The bcmrelease function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket data structure, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted release operation.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1598?
CVE-2011-1598 is classified as a medium severity vulnerability due to the potential for NULL pointer dereference leading to denial of service.
How do I fix CVE-2011-1598?
To fix CVE-2011-1598, you should upgrade your Linux kernel to a version higher than 2.6.39, as it includes the necessary patches.
What systems are affected by CVE-2011-1598?
CVE-2011-1598 affects Linux kernel versions up to and including 2.6.39 and its release candidates.
What is the impact of CVE-2011-1598?
The impact of CVE-2011-1598 is a denial of service condition, which can cause the system to crash or become unresponsive.
Who reported CVE-2011-1598?
CVE-2011-1598 was reported by Dave Jones.