CVE-2011-1023: Linux Kernel

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The Reliable Datagram Sockets (RDS) subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service (BUG_ON and system crash) via vectors involving (1) a loopback (aka loop) transmit operation or (2) an InfiniBand (aka ib) transmit operation.

Affected products

• Linux Linux Kernel: up to and including 2.6.37.6; version 2.6.37 only; version 2.6.37.1 only; version 2.6.37.2 only; version 2.6.37.3 only; version 2.6.37.4 only; …

Published 2012-06-21. Last modified 2026-06-16.