Total vulnerabilities in the database
The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 3.1 |
| avaya / 9608_firmware | 6.0 | 6.6.0.x |
| avaya / 9608g_firmware | 6.0 | 6.6.0.x |
| avaya / 9611g_firmware | 6.0 | 6.6.0.x |
| avaya / 9621g_firmware | 6.0 | 6.6.0.x |
| avaya / 9641g_firmware | 6.0 | 6.6.0.x |
| avaya / 9641gs_firmware | 6.0 | 6.6.0.x |