PT-2011-1080 · Linux+1 · Linux Kernel+1

Ben Hutchings · Published 2011-03-01 · Updated 2023-02-13 · CVE-2011-2182

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39.1

Description The issue is related to the ldm frag add function in fs/partitions/ldm.c, which does not properly handle memory allocation for non-initial fragments. This might allow local users to conduct buffer overflow attacks and gain privileges or obtain sensitive information via a crafted LDM partition table. The vulnerability exists because of an incomplete fix for a previous issue. Multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system can be exploited remotely, leading to a disruption of protected information availability.

Recommendations For Linux kernel versions prior to 2.6.39.1, update to version 2.6.39.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the ldm frag add function in fs/partitions/ldm.c to minimize the risk of exploitation. Avoid using crafted LDM partition tables until the issue is resolved.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-20

CWE-119

Related Identifiers

BDU:2015-04607

CVE-2011-2182

DSA-2264-1

USN-1193-1

USN-1203-1

USN-1208-1

USN-1216-1

USN-1218-1

USN-1256-1

USN-1332-1

USN-1341-1

USN-1383-1

USN-1390-1

USN-1392-1

USN-1394-1

Affected Products

Linux Kernel

Suse Linux Enterprise

References · 31

• https://github.com/torvalds/linux/commit/cae13fe4cc3f24820ffb990c09110626837e85d4 · Patch
• https://ubuntu.com/security/notices/USN-1341-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1392-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1203-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1332-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1256-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1390-1 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=139447903326211&w=2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1394-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1193-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• http://openwall.com/lists/oss-security/2011/06/05/1 · Patch
• https://ubuntu.com/security/CVE-2011-2182 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1218-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1383-1 · Vendor Advisory