PT-2011-1082 · Linux+2 · Linux Kernel+3

Vasily Averin · Published 2011-03-01 · Updated 2023-02-13 · CVE-2011-2491

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.0 kernel-kdumppae (affected versions not specified)

Description The issue allows local users to cause a denial of service, resulting in a system hang, via a specific system call. Additionally, multiple vulnerabilities in the kernel-kdumppae package of the SUSE Linux Enterprise operating system can lead to disruption of protected information availability, and these vulnerabilities can be exploited remotely.

Recommendations For Linux kernel versions prior to 3.0, update to version 3.0 or later to resolve the issue. For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2015-04607

CVE-2011-2491

DSA-2303-1

DSA-2310-1

RHSA-2011:1189

RHSA-2011:1212

RHSA-2011:1253

RHSA-2011:1813

RHSA-2011_1189

RHSA-2011_1212

USN-1244-1

USN-1268-1

USN-1269-1

USN-1271-1

USN-1272-1

USN-1274-1

USN-1278-1

USN-1279-1

USN-1281-1

USN-1285-1

USN-1286-1

Affected Products

Linux Kernel

Red Hat

Suse Linux Enterprise

Kernel-Kdumppae

References · 30

• https://github.com/torvalds/linux/commit/0b760113a3a155269a3fba93a409c640031dd68f · Patch
• https://ubuntu.com/security/notices/USN-1286-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2011-2491 · Security Note
• https://ubuntu.com/security/CVE-2011-2491 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1244-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1278-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1279-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-2491 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=709393 · Patch
• https://ubuntu.com/security/notices/USN-1274-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• http://openwall.com/lists/oss-security/2011/06/23/6 · Patch
• http://rhn.redhat.com/errata/RHSA-2011-1212.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1281-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2491 · Security Note