CVE-2011-1581: Linux Kernel

High severity, CVSS 9.0. EPSS: 3.4% chance of exploitation in the next 30 days.

The bond_select_queue function in drivers/net/bonding/bond_main.c in the Linux kernel before 2.6.39, when a network device with a large number of receive queues is installed but the default tx_queues setting is used, does not properly restrict queue indexes, which allows remote attackers to cause a denial of service (BUG and system crash) or possibly have unspecified other impact by sending network traffic.

Affected products

• Linux Linux Kernel: before 2.6.39 (fixed in 2.6.39)

Published 2011-05-26. Last modified 2026-06-16.