{"id":"CVE-2011-2525","aliases":["DSA-2303-1","DSA-2310-1","EUVD-2011-2510","GHSA-4hrf-7c2r-c5x7","RHSA-2011:1065","RHSA-2011:1163","UBUNTU-CVE-2011-2525"],"status":"published","title":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not...","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00477,"percentile":0.41474,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2011-09-08T00:00:00Z","modified":"2026-06-26T12:20:50Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-35squeeze1"}]}],"versions":["2.6.32-30","2.6.32-30+m68k.5","2.6.32-31","2.6.32-31~bpo50+1","2.6.32-32","2.6.32-33","2.6.32-34","2.6.32-34squeeze1","2.6.32-35","2.6.32-35~bpo50+1"],"bundled":18},{"source":"osv","ecosystem":"Debian:5.0","package":"linux-2.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.26-26lenny4"}]}],"versions":["2.6.26-13","2.6.26-13lenny2","2.6.26-13lenny2~bpo40+1","2.6.26-14","2.6.26-15","2.6.26-15lenny1","2.6.26-15lenny2","2.6.26-15lenny3","2.6.26-15~bpo40+1","2.6.26-15~bpo40+2","2.6.26-16","2.6.26-17","2.6.26-17lenny1","2.6.26-17lenny2","2.6.26-17lenny2~bpo40+1","2.6.26-17~bpo40+1","2.6.26-18","2.6.26-19","2.6.26-19lenny1","2.6.26-19lenny2","2.6.26-19~bpo40+1","2.6.26-20","2.6.26-20~bpo40+1","2.6.26-21","2.6.26-21lenny1","2.6.26-21lenny2","2.6.26-21lenny3","2.6.26-21lenny4","2.6.26-21~bpo40+1","2.6.26-22","2.6.26-22lenny1","2.6.26-23","2.6.26-24","2.6.26-24lenny1","2.6.26-25","2.6.26-25lenny1","2.6.26-26","2.6.26-26lenny1","2.6.26-26lenny2","2.6.26-26lenny3"],"bundled":17},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-274.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-PAE-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-debuginfo-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-kdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"kernel-xen-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.18-238.21.1.el5"}]}],"bundled":2}],"products":[{"vendor":"linux","product":"linux_kernel"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720552","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-1065.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://kerneltrap.org/mailarchive/linux-netdev/2010/5/21/6277805","tags":["mailing-list","x_refsource_MLIST","x_transferred","Broken Link","report"]},{"url":"http://mirror.anl.gov/pub/linux/kernel/v2.6/ChangeLog-2.6.35","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://rhn.redhat.com/errata/RHSA-2011-1163.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://openwall.com/lists/oss-security/2011/07/12/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=53b0f08042f04813cd1a7473dacd3edfacb28eb3","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2525","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=53b0f08042f04813cd1a7473dacd3edfacb28eb3"},{"url":"https://github.com/advisories/GHSA-4hrf-7c2r-c5x7"},{"url":"https://access.redhat.com/errata/RHSA-2011:1065","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.7_Technical_Notes/kernel.html#RHSA-2011-1065","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=390451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=431738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=441730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=465876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=477032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=481629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=494927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=511901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=517629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=525898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=537277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=553411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=553803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=567449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=567540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=579000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=579858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=589512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=603345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=607114","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=611407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=622542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=622647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=623979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=626585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=626974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=626977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=627496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=631950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=632399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=633196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=635992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=637970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=642388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=645343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=645528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=645646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=646513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=648854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=651333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=651409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=652321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=652369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=653286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=653828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=654293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=657166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=658012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=658418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=659816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=660368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=660661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=660871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=663041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=663123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=663563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=664592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=664931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=665197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=665972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=666080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=666304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=666866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=667327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=667660","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=667810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=668934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=669961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=670367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=670373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=671238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=671595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=672619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=672724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=672981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=673616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=674514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=675727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=675986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677703","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=679120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=679407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=679487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=681303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=681586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=683155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=683978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=684795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=688646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=688989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=690555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=691460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=692946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=696411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=698432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=698879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=700546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=702355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=702652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=702657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=704497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=705324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=705455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=706414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=711450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720861","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1065.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-1780","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1780","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2525","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2525","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-2689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2689","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1163","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2011-1065.html","tags":["article"]},{"url":"https://rhn.redhat.com/errata/RHSA-2009-1243.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=719066","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1163.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2011-2525","tags":["report"]},{"url":"http://www.debian.org/security/2011/dsa-2303","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-1241-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1256-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1268-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1269-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1274-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-1286-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-2525","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","status":"published","published":"2012-02-02T02:00:00Z","modified":"2024-08-06T23:00:34.271Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-2510","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","status":"published","published":"2012-02-02T02:00:00Z","modified":"2024-08-06T23:00:34Z","updated_at":"2026-11-03T01:39:55.11051Z"}],"ghsa":[{"id":"GHSA-4hrf-7c2r-c5x7","title":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not...","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","status":"published","published":"2022-05-13T01:24:38Z","modified":"2023-02-13T00:30:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:54:04.926808Z"}],"nvd":[{"id":"CVE-2011-2525","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","status":"published","published":"2012-02-02T04:09:47.737Z","modified":"2026-06-16T23:31:30.943Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:02:12.272092Z"}],"osv":[{"id":"UBUNTU-CVE-2011-2525","description":"The qdisc_notify function in net/sched/sch_api.c in the Linux kernel before 2.6.35 does not prevent tc_fill_qdisc function calls referencing builtin (aka CQ_F_BUILTIN) Qdisc structures, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via a crafted call.","status":"withdrawn","published":"2011-10-06T00:00:00Z","modified":"2026-02-04T02:19:58.115912Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:06.395274Z"},{"id":"DSA-2303-1","title":"linux-2.6 - several issues","status":"published","published":"2011-09-08T00:00:00Z","modified":"2026-03-09T01:19:45.85285Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"DSA-2310-1","title":"linux-2.6 - several issues","status":"published","published":"2011-09-22T00:00:00Z","modified":"2026-03-09T01:19:32.189014Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"RHSA-2011:1065","title":"Red Hat Security Advisory: Red Hat Enterprise Linux 5.7 kernel security and bug fix update","status":"published","published":"2024-09-15T18:57:46Z","modified":"2026-06-26T12:20:50.29683207Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:1163","title":"Red Hat Security Advisory: kernel security and bug fix update","status":"published","published":"2024-09-15T18:57:50Z","modified":"2026-02-19T10:01:04Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}