CVE-2011-0716: The br_multicast_add_group function in net/bridge/br_multicast.c in the Linux kernel before 2.6.38, when a...

Security readout for executives and security teams

CVE-2011-0716 is a Linux kernel flaw that can let a local user crash a system under a specific Ethernet bridge configuration. The public bundle describes denial of service through memory corruption, not data theft or remote takeover. Business urgency is mainly for legacy or embedded Linux systems still running pre-2.6.38 kernels or unverified vendor backports. Exposure is most likely on legacy Linux systems with kernels older than 2.6.38, affected Ethernet bridge multicast behavior, and local user or workload access. Maintained distributions are likely patched or backported, but the bundle does not identify specific vendor package versions. Treat this as a targeted legacy-infrastructure availability risk. It is not shown as actively exploited, but a local crash on bridge hosts can disrupt virtualization, network appliances, or shared systems. Prioritize verification where old kernels and untrusted local access overlap. Mitigation focus: Upgrade to a kernel containing the upstream fix or a vendor backport.; Check distribution advisories for CVE-2011-0716 package status.; Prioritize bridge hosts that allow untrusted local users or workloads..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.