CVE-2010-0741: Linux Kernel

High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days.

The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).

Affected products

• Linux Linux Kernel: version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; version 2.6.11 only; version 2.6.11.1 only; …

Published 2010-04-12. Last modified 2026-06-16.