Linux Kernel 'br_multicast.c' Bridge NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	41432
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-0709
Remote:	Yes
Local:	No
Published:	Jul 06 2010 12:00AM
Updated:	Feb 16 2011 03:29PM
Credit:	Frank Arnold
Vulnerable:	Linux kernel 2.6.35-rc1
Not Vulnerable:	Linux kernel 2.6.35-rc4

Linux Kernel 'br_multicast.c' Bridge NULL Pointer Dereference Denial of Service Vulnerability

The Linux kernel is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the kernel to panic, denying service to legitimate users. Due to the nature of this issue, attackers may be able to execute arbitrary code, but this has not been confirmed.

Linux Kernel 'br_multicast.c' Bridge NULL Pointer Dereference Denial of Service Vulnerability

Attackers can exploit this issue with readily available tools.

Linux Kernel 'br_multicast.c' Bridge NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Linux Kernel 'br_multicast.c' Bridge NULL Pointer Dereference Denial of Service Vulnerability

References:

• bridge br_multicast: BUG: unable to handle kernel NULL pointer dereference (Frank Arnold)
  
• Linux kernel Homepage (kernel.org)