CVE-2011-4112: The net subsystem in the Linux kernel before 3.1 does not properly restrict use of the IFF_TX_SKB_SHARING f...

Security readout for executives and security teams

This is an old Linux kernel availability bug. On kernels before 3.1, a local actor with CAP_NET_ADMIN could trigger a kernel panic through packet generation and bridge/VLAN networking behavior. It is not a remote compromise issue in the cited sources, but affected legacy systems could crash. Exposure is most likely on legacy Linux systems running kernels before 3.1, especially where untrusted users, containers, or services can obtain CAP_NET_ADMIN. Systems without that capability exposure have materially reduced practical risk. Treat this as a legacy-platform availability risk. It is unlikely to drive emergency response unless old kernels and broad CAP_NET_ADMIN exposure remain present, but affected internet-facing or business-critical hosts should be remediated in normal vulnerability cycles. Mitigation focus: Prioritize replacing kernels older than Linux 3.1.; Apply vendor kernel updates containing the upstream fix.; Restrict CAP_NET_ADMIN to trusted administrators and services..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.