The socket implementation in net/core/sock.c in the Linux kernel before
2.6.35 does not properly manage a backlog of received packets, which allows
remote attackers to cause a denial of service by sending a large amount of
network traffic, related to the sk_add_backlog function and the
sk_rmem_alloc socket field. NOTE: this vulnerability exists because of an
incomplete fix for CVE-2010-4251.

Alex Shi and Eric Dumazet discovered that the network stack did not
correctly handle packet backlogs. A remote attacker could exploit this by
sending a large amount of network traffic to cause the system to run out of
memory, leading to a denial of service.