The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO).
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
| AND |
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 5 | |||
| kvm-0:83-164.el5 | cpe:/a:redhat:rhel_virtualization:5 | RHSA-2010:0271 | 2010-03-29T00:00:00Z |
| Red Hat Enterprise Virtualization for RHEL-5 | |||
| rhev-hypervisor-0:5.5-2.2.4.2.el5rhev | cpe:/o:redhat:enterprise_linux:5::hypervisor | RHSA-2010:0476 | 2010-06-22T00:00:00Z |
No data.
Project Subscriptions
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2010-0767 | The virtio_net_bad_features function in hw/virtio-net.c in the virtio-net driver in the Linux kernel before 2.6.26, when used on a guest OS in conjunction with qemu-kvm 0.11.0 or KVM 83, allows remote attackers to cause a denial of service (guest OS crash, and an associated qemu-kvm process exit) by sending a large amount of network traffic to a TCP port on the guest OS, related to a virtio-net whitelist that includes an improper implementation of TCP Segment Offloading (TSO). |
 Ubuntu USN |
USN-947-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T00:59:38.986Z
Reserved: 2010-02-26T00:00:00
Link: CVE-2010-0741
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2010-04-12T18:30:00.493
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-0741
Redhat
OpenCVE Enrichment
No data.