NetSight
IP …
high7.7

CVE-2018-1000026

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that…

Impact

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12 before 4.4.181
from 4.5.0 before 4.9.159
from 4.10 before 4.14.102
from 4.15 before 4.16
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
DebianDebian Linux
Version 8.0

Weakness classification

CWE-20

References