PT-2012-1580 · Linux · Linux Kernel

Dan Rosenberg · CVE-2011-2906 · Publicado 2012-05-24 · Atualizado 2024-08-07

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.1

Description The issue is related to an integer signedness error in the pmcraid ioctl passthrough function, which might allow local users to cause a denial of service, potentially leading to memory consumption or memory corruption. This can be achieved via a negative size value in an ioctl call. It is noted that this may only be a vulnerability in unusual environments where a privileged program can obtain the required file descriptor.

Recommendations For Linux kernel versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the pmcraid ioctl passthrough function to minimize the risk of exploitation.

Exploit

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2011-2906

Produtos afetados

Linux Kernel

Referências · 6

• 🔥 https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d · Exploit
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-2906 · Nota de Segurança
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 · Aviso do Fabricante
• https://t.me/cvenotify/89536 · Publicação no Telegram
• http://openwall.com/lists/oss-security/2011/08/09/8 · Correção