CVE-2011-2723: Input Validation
Currently skbgroheaderslow unconditionally resets frag0 and frag0len. However, when we can't pull on the skb this leaves the GRO fields in an inconsistent state.
This patch fixes this by only resetting those fields after the pskbmaypull test.
Upstream commit: http://git.kernel.org/linus/17dd759c67f21e34f2156abcf415e1f60605a188
Acknowledgements: Red Hat would like to thank Brent Meshier for reporting this issue.
Other sources
The skbgroheaderslow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2723?
CVE-2011-2723 has a medium severity rating due to the potential for inconsistent fragmented packet handling.
How do I fix CVE-2011-2723?
To mitigate CVE-2011-2723, update your Linux kernel to version 2.6.39.4 or later.
Which Linux versions are affected by CVE-2011-2723?
CVE-2011-2723 affects Linux kernel versions prior to 2.6.39.4.
What is the impact of CVE-2011-2723?
The impact of CVE-2011-2723 includes possible packet loss and inconsistent state in packet fragmentation.
Is CVE-2011-2723 related to network performance?
Yes, CVE-2011-2723 can negatively affect network performance due to issues with fragmented packets.