CVE-2011-4326: High severity linux kernel vulnerability
A bug was found in the way headroom check was performed in udp6ufofragment() function. A remote attacker could use this flaw to crash the system.
Upstream patch: a9cf73ea7ff78f52662c8658d93c226effbbedde
Other sources
The udp6ufofragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4326?
CVE-2011-4326 has a critical severity as it can lead to a system crash from remote exploitation.
How do I fix CVE-2011-4326?
To fix CVE-2011-4326, apply the upstream patch a9cf73ea7ff78f52662c8658d93c226effbbedde.
What systems are affected by CVE-2011-4326?
CVE-2011-4326 affects the Linux kernel versions up to 2.6.39.
Can CVE-2011-4326 impact Avaya 96x1 IP Deskphones?
Yes, CVE-2011-4326 impacts Avaya 96x1 IP Deskphones with firmware versions between 6.0.0 and 6.6.0.
What vulnerability does CVE-2011-4326 exploit?
CVE-2011-4326 exploits a bug in the headroom check within the udp6_ufo_fragment() function.