CVE-2011-4112

The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.

• http://downloads.avaya.com/css/P8/documents/100156038Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=550fd08c2cebad61c548def135f67aba284c6162
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/11/21/4Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=751006Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/550fd08c2cebad61c548def135f67aba284c6162Patch, Third Party Advisory
• http://downloads.avaya.com/css/P8/documents/100156038Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=550fd08c2cebad61c548def135f67aba284c6162
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1Mailing List, Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2011/11/21/4Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=751006Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/550fd08c2cebad61c548def135f67aba284c6162Patch, Third Party Advisory

Published

May 17, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4106TimThumb (timthumb.php) before 2.0 does not validate the ent…
• CVE-2011-4107The simplexml_load_string function in the XML import plug-in…6.5
• CVE-2011-4108The DTLS implementation in OpenSSL before 0.9.8s and 1.x bef…
• CVE-2011-4109Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, wh…
• CVE-2011-4110The user_update function in security/keys/user_defined.c in …
• CVE-2011-4111Buffer overflow in the ccid_card_vscard_handle_message funct…
• CVE-2011-4113SQL injection vulnerability in the Views module before 6.x-2…
• CVE-2011-4114The par_mktmpdir function in the PAR::Packer module before 1…
• CVE-2011-4115Parallel::ForkManager module before 1.0.0 for Perl does not …7.5
• CVE-2011-4116_is_safe in the File::Temp module for Perl does not properly…3.3
• CVE-2011-4117The Batch::BatchRun module 1.03 for Perl does not properly h…7.5
• CVE-2011-4118Mahara before 1.4.1, when MNet (aka the Moodle network featu…