CVE-2011-2525: Null Pointer Dereference
Last updated 24 July 2024
Other sources
tcfillqdisc() should not be called for builtin qdisc, or it dereference a NULL pointer to get device ifindex.
Reference: http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805
Upstream commit: http://git.kernel.org/linus/53b0f08042f04813cd1a7473dacd3edfacb28eb3
— Red Hat
The qdiscnotify function in net/sched/schapi.c in the Linux kernel before 2.6.35 does not prevent tcfillqdisc function calls referencing builtin (aka CQFBUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2525?
CVE-2011-2525 has been classified with medium severity due to the potential for NULL pointer dereference.
How do I fix CVE-2011-2525?
To fix CVE-2011-2525, it is recommended to upgrade the Linux kernel to version 2.6.36 or later.
Which versions of Linux are affected by CVE-2011-2525?
CVE-2011-2525 affects Linux kernel versions up to 2.6.35.
What happens if CVE-2011-2525 is exploited?
Exploitation of CVE-2011-2525 may lead to a system crash or unexpected behavior due to a NULL pointer dereference.
Is CVE-2011-2525 specific to certain Linux distributions?
Yes, CVE-2011-2525 specifically affects certain Linux distributions including Debian and Red Hat Enterprise Linux 4.0.