PT-2010-5668 · Linux+1 · Linux Kernel+4
Segoon
+1
·
Publicado
1970-01-01
·
Atualizado
2023-02-13
·
CVE-2011-2909
CVSS v2.0
5.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
SUSE Linux Enterprise versions prior to the fixed version
btrfs-kmp-xen versions (affected versions not specified)
btrfs-kmp-pae versions (affected versions not specified)
kernel-desktop-devel versions (affected versions not specified)
Description
The issue affects the SUSE Linux Enterprise operating system, specifically the btrfs-kmp-xen, btrfs-kmp-pae, and kernel-desktop-devel packages. Exploitation of the vulnerabilities can lead to a breach of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited locally. The do devinfo ioctl function in the Linux kernel is also affected, allowing local users to obtain sensitive information from kernel memory.
Recommendations
For btrfs-kmp-xen, consider disabling the vulnerable package until a patch is available.
For btrfs-kmp-pae, restrict access to the vulnerable package to minimize the risk of exploitation.
For kernel-desktop-devel, avoid using the vulnerable package until the issue is resolved.
As a temporary workaround, consider disabling the do devinfo ioctl function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Suse Linux Enterprise
Btrfs-Kmp-Pae
Btrfs-Kmp-Xen
Kernel-Desktop-Devel