CVE-2011-4112: Avaya 9608 Firmware

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING flag, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability to access /proc/net/pktgen/pgctrl, and then using the pktgen package in conjunction with a bridge device for a VLAN interface.

Affected products

• Avaya 9608 Firmware: from 6.0, up to and including 6.6.0
• Avaya 9608g Firmware: from 6.0, up to and including 6.6.0
• Avaya 9611g Firmware: from 6.0, up to and including 6.6.0
• Avaya 9621g Firmware: from 6.0, up to and including 6.6.0
• Avaya 9641g Firmware: from 6.0, up to and including 6.6.0
• Avaya 9641gs Firmware: from 6.0, up to and including 6.6.0
• Linux Linux Kernel: before 3.1 (fixed in 3.1)

Published 2012-05-17. Last modified 2026-06-16.