PT-2011-1078 · Linux+2 · Linux Kernel+2

Vasiliy Kulikov · Published 2011-03-01 · Updated 2023-02-13 · CVE-2011-1746

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38.5 kernel-kdumppae (affected versions not specified)

Description The issue is related to multiple integer overflows in the Linux kernel, specifically in the agp allocate memory and agp create user memory functions. This can lead to buffer overflows, causing a denial of service (system crash) or potentially other unspecified impacts. The overflows can be triggered by local users through calls that specify a large number of memory pages. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise that can be exploited remotely, leading to a disruption of protected information availability.

Recommendations For Linux kernel versions prior to 2.6.38.5, update to version 2.6.38.5 or later to resolve the issue. For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

CWE-189

Related Identifiers

BDU:2015-04607

CVE-2011-1746

DSA-2240-1

DSA-2264-1

RHSA-2011:0927

RHSA-2011:1253

RHSA-2011:1350

RHSA-2011_0927

RHSA-2011_1350

Affected Products

Linux Kernel

Red Hat

Kernel-Kdumppae

References · 17

• https://linux.oracle.com/errata/ELSA-2011-1350.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/04/21/4 · Patch
• http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38.5 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=698998 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-1746 · Security Note
• http://rhn.redhat.com/errata/RHSA-2011-0927.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/04/22/7 · Patch
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://lkml.org/lkml/2011/4/14/294 · Patch
• https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Note
• https://github.com/torvalds/linux/commit/4ff67b720c02c36e54d55b88c2931879b7db1cd2 · Note
• http://securityfocus.com/bid/47535 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b522f02184b413955f3bc952e3776ce41edc6355 · Note
• https://lkml.org/lkml/2011/4/19/400 · Note
• http://groups.google.com/group/fa.linux.kernel/msg/4a28ecb7f755a88d?dmode=source · Note