PT-2011-1070 · Linux+2 · Linux Kernel+2

Brad Spengler · Published 2011-03-01 · Updated 2015-10-06 · CVE-2011-0726

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39-rc1 kernel-kdumppae (affected versions not specified)

Description The issue concerns a function in the Linux kernel that does not perform an expected uid check, making it easier for local users to defeat the ASLR protection mechanism. This can be done by reading specific fields in the /proc/#####/stat file for a process executing a PIE binary. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise that can lead to disruption of protected information and can be exploited remotely.

Recommendations For Linux kernel versions prior to 2.6.39-rc1, update to version 2.6.39-rc1 or later to resolve the issue. For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-04607

CVE-2011-0726

DSA-2240-1

DSA-2264-1

RHSA-2011:0498

RHSA-2011:0500

RHSA-2011:0833

RHSA-2011_0498

RHSA-2011_0833

Affected Products

Linux Kernel

Red Hat

Kernel-Kdumppae

References · 17

• http://spinics.net/lists/mm-commits/msg82726.html · Patch
• https://linux.oracle.com/errata/ELSA-2011-2015.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0726 · Security Note
• https://lkml.org/lkml/2011/3/11/380 · Patch
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0498.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2011-0833.html · Vendor Advisory
• http://securityfocus.com/bid/47791 · Patch
• https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Note
• https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Note
• http://groups.google.com/group/fa.linux.kernel/msg/4a28ecb7f755a88d?dmode=source · Note
• https://suse.com/support/security/advisories/2011_34_kernel.html · Note
• http://kernel.org/pub/linux/kernel/v2.6/testing/v2.6.39/ChangeLog-2.6.39-rc1 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=684569 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5883f57ca0008ffc93e09cbb9847a1928e50c6f3 · Note