CVE-2011-2723
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4...
5.7 MediumFix available
CVE-2011-2723 is a medium vulnerability (CVSS 5.7) in Linux Kernel, published September 6, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. Fixed in kernel 0:2.6.18-238.27.1.el5.
- Severity
- 5.7 MediumCVSS 2.0, NVD
- Exploit chance
- 1.11%EPSS, 66th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:2.6.18-238.27.1.el5kernel +83 more
Description
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
Exploit likelihood
1.11%Down 0.9 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-2.6Debian:6.0 From an advisory covering 18 CVEs | before 2.6.32-35squeeze1, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 5 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35~bpo50+1 | 2.6.32-35squeeze1 |
kernelRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
Show 74 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-headersRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server | before 0:2.6.18-238.27.1.el5 | 0:2.6.18-238.27.1.el5 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 11 CVEs | before 0:2.6.32-131.17.1.el6 | 0:2.6.32-131.17.1.el6 |
kernelRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 15 CVEs | before 0:2.6.18-274.7.1.el5 | 0:2.6.18-274.7.1.el5 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 14 CVEs | before 0:2.6.33.9-rt31.79.el6rt | 0:2.6.33.9-rt31.79.el6rt |
What each source reports
NVD Score used
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
- Record
CVE-2011-2723- CVSS 2.0
- 5.7 Medium
AV:A/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
- Record
CVE-2011-2723- Updated
- 2026-11-02
EUVDEUVD-2011-2701No score
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
- Record
EUVD-2011-2701- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gj23-gxgc-vvhjNo score
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4...
The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4, when Generic Receive Offload (GRO) is enabled, resets certain fields in incorrect situations, which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.
- Record
GHSA-gj23-gxgc-vvhj- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugzilla.redhat.com/show_bug.cgi?id=726552
redhat.com/support/errata/RHSA-2011-1321.html
openwall.com/lists/oss-security/2011/07/29/1
securitytracker.com/id?1025876
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17dd759c67f21e34f2156abcf415e1f60605a188
Show 153 moreShow less
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39.4
securityfocus.com/bid/48929
marc.info?l=bugtraq&m=139447903326211&w=2
nvd.nist.gov/vuln/detail/CVE-2011-2723
github.com/advisories/GHSA-gj23-gxgc-vvhj
access.redhat.com/errata/RHSA-2011:1321
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1321.json
cve.org/CVERecord?id=CVE-2011-2723
rhn.redhat.com/errata/RHSA-2011-1241.html
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/kernel.html