PT-2011-2576 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Publicado 2011-03-01 · Atualizado 2024-06-15 · CVE-2011-0711

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc6-git3

Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is due to the xfs fs geometry function in fs/xfs/xfs fsops.c not initializing a certain structure member, which can be exploited via an FSGEOMETRY V1 ioctl call.

Recommendations For Linux kernel versions prior to 2.6.38-rc6-git3, update to version 2.6.38-rc6-git3 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-0711

DSA-2240-1

DSA-2264-1

OPENSUSE-SU-2024:10128-1

RHSA-2011:0498

RHSA-2011:0500

RHSA-2011:0927

RHSA-2011_0498

RHSA-2011_0927

Produtos afetados

Linux Kernel

Red Hat

Referências · 136

• https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c · Nota
• https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b · Nota
• https://suse.com/security/cve/CVE-2010-2066 · Nota
• https://suse.com/security/cve/CVE-2016-7039 · Nota
• http://securityfocus.com/bid/46417 · Nota
• https://suse.com/security/cve/CVE-2016-4470 · Nota
• http://spinics.net/lists/netdev/msg145791.html · Nota
• https://suse.com/security/cve/CVE-2010-3297 · Nota
• https://suse.com/security/cve/CVE-2010-3296 · Nota
• https://suse.com/security/cve/CVE-2013-0231 · Nota
• http://osvdb.org/70950 · Nota
• https://suse.com/security/cve/CVE-2010-1641 · Nota
• https://suse.com/security/cve/CVE-2016-7042 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2185 · Nota