CVE-2011-1478: Linux Kernel

Medium severity, CVSS 5.7. EPSS: 1.1% chance of exploitation in the next 30 days.

The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel before 2.6.38 does not reset the values of certain structure members, which might allow remote attackers to cause a denial of service (NULL pointer dereference) via a malformed VLAN frame.

Affected products

• Linux Linux Kernel: before 2.6.38 (fixed in 2.6.38)

Published 2011-10-23. Last modified 2026-06-16.