Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 300951 (CVE-2010-0006)

Summary: Kernel: ipv6: skb_dst() can be NULL (CVE-2010-0006)
Product: Gentoo Security Reporter: Bjoern Tropf (RETIRED) <asym>
Component: KernelAssignee: Gentoo Security <security>
Severity: normal CC: kernel
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: [linux <2.6.34]
Package list:
Runtime testing required: ---

Description Bjoern Tropf (RETIRED) gentoo-dev 2010-01-14 09:28:22 UTC
CVE pending...
Comment 1 Bjoern Tropf (RETIRED) gentoo-dev 2010-01-14 09:34:25 UTC
@Kernel: Please fix this issue in the next genpatch release. (Severity: low)
Comment 2 Alex Legler (RETIRED) archtester gentoo-dev Security 2010-03-02 09:47:18 UTC
CVE-2010-0006 (
  The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel
  before, when network namespaces are enabled, allows remote
  attackers to cause a denial of service (NULL pointer dereference) via
  an invalid IPv6 jumbogram, a related issue to CVE-2007-4567.