CVE-2011-3359

Published: 15 December 2011

The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.

From the Ubuntu security team

A flaw was found in the b43 driver in the Linux kernel. An attacker could use this flaw to cause a denial of service if the system has an active wireless interface using the b43 driver.

Priority

Medium

CVSS 3 base score: 7.5

Status

Notes

ignoring on lucid/fsl-imx51 as this is now off support and
out buildds do not have this h/w

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3359
• https://usn.ubuntu.com/usn/usn-1323-1
• https://usn.ubuntu.com/usn/usn-1325-1
• https://usn.ubuntu.com/usn/usn-1167-1
• https://usn.ubuntu.com/usn/usn-1160-1
• https://usn.ubuntu.com/usn/usn-1141-1
• https://usn.ubuntu.com/usn/usn-1162-1
• https://usn.ubuntu.com/usn/usn-1212-1
• https://usn.ubuntu.com/usn/usn-1159-1
• https://usn.ubuntu.com/usn/usn-1187-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=738202
• https://launchpad.net/bugs/905060