CVE-2011-4087: Linux Kernel

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attackers to cause a denial of service by leveraging connectivity to a network interface that uses an Ethernet bridge device.

Affected products

• Linux Linux Kernel: before 2.6.39 (fixed in 2.6.39)

Published 2013-06-08. Last modified 2026-06-16.