CVE-2011-0716

CVE-2011-0716 describes a denial-of-service vulnerability in the Linux kernel, specifically within the br_multicast_add_group function in net/bridge/br_multicast.c. This flaw affects Linux kernels prior to version 2.6.38 when using a specific Ethernet bridge configuration. A local attacker can trigger memory corruption and a system crash by sending IGMP packets to a local interface. The vulnerability has a CVSS score of 4.7, indicating a medium severity. It requires local access (AV:L) and moderate attack complexity (AC:M), with no authentication needed (Au:N), leading to a complete denial of service (A:C). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.