Upstream information
Description
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.NVD CVSS v2 Base Score: 5.7 (AV:A/AC:M/Au:N/C:N/I:N/A:C)
Novell/SUSE information
Note from the SUSE Security Team
This issue only affects kernels that have the generic checksum offload infrastructure, including kernels after 2.6.29. Earlier kernels ando SUSE Linux Enterprise releases up to and including SUSE Linux Enterprise 10 are not affected. Novell Bugzilla entry: 709164 SUSE Security Advisories:- openSUSE-SU-2012:0206-1, published Thu, 9 Feb 2012 19:09:19 +0100 (CET)
- openSUSE-SU-2012:0236-1, published Thu, 9 Feb 2012 19:10:55 +0100 (CET)
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|---|---|
| openSUSE 11.4 DEBUGINFO |
| |
| openSUSE 11.4 |
| |
| openSUSE 11.3 |
| |
| openSUSE 11.3 |
|
