CVE-2011-1478

CVE-2011-1478 describes a NULL pointer dereference vulnerability in the Linux kernel's Generic Receive Offload (GRO) implementation, specifically within the napi_reuse_skb function. This flaw, affecting Linux kernels prior to version 2.6.38, could allow a remote attacker to cause a denial of service by sending a malformed VLAN frame. The vulnerability has a CVSS score of 5.7, indicating a medium severity, with an adjacent network attack vector and medium attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.