CVE-2011-0716

The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a certain Ethernet bridge configuration is used, allows local users to cause a denial of service (memory corruption and system crash) by sending IGMP packets to a local interface.

• CWE-399

• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287
• http://www.openwall.com/lists/oss-security/2011/02/17/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=678169Issue Tracking
• https://github.com/torvalds/linux/commit/6b0d6a9b4296fa16a28d10d416db7a770fc03287Issue Tracking, Patch, Third Party Advisory
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38Broken Link
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=6b0d6a9b4296fa16a28d10d416db7a770fc03287
• http://www.openwall.com/lists/oss-security/2011/02/17/2Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=678169Issue Tracking
• https://github.com/torvalds/linux/commit/6b0d6a9b4296fa16a28d10d416db7a770fc03287Issue Tracking, Patch, Third Party Advisory

Published

Jun 21, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0710The task_show_regs function in arch/s390/kernel/traps.c in t…
• CVE-2011-0711The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Li…
• CVE-2011-0712Multiple buffer overflows in the caiaq Native Instruments US…
• CVE-2011-0713Heap-based buffer overflow in wiretap/dct3trace.c in Wiresha…
• CVE-2011-0714Use-after-free vulnerability in a certain Red Hat patch for …
• CVE-2011-0715The mod_dav_svn module for the Apache HTTP Server, as distri…
• CVE-2011-0717Session fixation vulnerability in Red Hat Network (RHN) Sate…
• CVE-2011-0718Red Hat Network (RHN) Satellite Server 5.4 does not use a ti…
• CVE-2011-0719Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x befo…
• CVE-2011-0720Unspecified vulnerability in Plone 2.5 through 4.0, as used …
• CVE-2011-0721Multiple CRLF injection vulnerabilities in (1) chfn and (2) …
• CVE-2011-0722FFmpeg before 0.5.4, as used in MPlayer and other products, …