PT-2012-1861 · Linux+1 · Linux Kernel+1

Eugene Teo · Publicado 2012-01-10 · Atualizado 2023-02-13 · CVE-2011-4325

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.31-rc6

Description The issue is related to the NFS implementation in the Linux kernel, where certain functions are called without properly initializing specific data. This can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference and O DIRECT oops. An example of exploitation is demonstrated using the diotest4 test from the LTP suite.

Recommendations For Linux kernel versions prior to 2.6.31-rc6, update to version 2.6.31-rc6 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2011-4325

RHSA-2012:0007

RHSA-2012_0007

Produtos afetados

Linux Kernel

Red Hat

Referências · 26

• https://github.com/torvalds/linux/commit/dc0b027dfadfcb8a5504f7d8052754bf8d501ab9 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=8762202dd0d6e46854f786bdb6fb3780a1625efe · Nota
• https://access.redhat.com/security/cve/CVE-2011-4324 · Nota
• https://bdu.fstec.ru/vul/2015-04359 · Nota de Segurança
• http://xorl.wordpress.com/2011/12/08/cve-2011-4132-linux-kernel-jbdjbd2-local-dos · Nota
• https://redhat.com/archives/rhsa-announce/2012-January/msg00001.html · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=755455 · Nota
• http://securityfocus.com/bid/51366 · Nota
• https://lkml.org/lkml/2011/2/7/368 · Nota
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=1ae88b2e4 · Nota
• https://ubuntu.com/security/CVE-2011-4325 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-4132 · Nota
• https://access.redhat.com/security/cve/CVE-2011-4330 · Nota
• https://access.redhat.com/security/cve/CVE-2011-4077 · Nota
• https://access.redhat.com/security/cve/CVE-2011-4325 · Nota