Candidate: CVE-2008-5713 PublicDate: 2008-12-24 18:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5713 https://ubuntu.com/security/notices/USN-714-1 Description: The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial of service (soft lockup) by sending a large amount of network traffic, as demonstrated by multiple simultaneous invocations of the Netperf benchmark application in UDP_STREAM mode. Ubuntu-Description: It was discovered that in certain situations the network scheduler did not correctly handle very large levels of traffic. A local attacker could produce a high volume of UDP traffic resulting in a system hang, leading to a denial of service. Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_linux-source-2.6.15: upstream_linux-source-2.6.15: needs-triage dapper_linux-source-2.6.15: released (2.6.15-53.75) gutsy_linux-source-2.6.15: DNE hardy_linux-source-2.6.15: DNE intrepid_linux-source-2.6.15: DNE devel_linux-source-2.6.15: DNE Patches_linux-source-2.6.22: upstream_linux-source-2.6.22: needs-triage dapper_linux-source-2.6.22: DNE gutsy_linux-source-2.6.22: released (2.6.22-16.61) hardy_linux-source-2.6.22: DNE intrepid_linux-source-2.6.22: DNE devel_linux-source-2.6.22: DNE Patches_linux: upstream_linux: needs-triage dapper_linux: DNE gutsy_linux: DNE hardy_linux: released (2.6.24-23.48) intrepid_linux: not-affected devel_linux: not-affected