NetSight
medium5.0

CVE-2012-1583

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enable…

Impact

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 2.6.21.7
Versions 2.6.0, 2.6.1, 2.6.2, 2.6.10, 2.6.11

Weakness classification

References