PT-2011-1083 · Linux+2 · Linux Kernel+2

Robert Swiecki · Published 2011-03-01 · Updated 2023-02-13 · CVE-2011-2496

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39 kernel-kdumppae (affected versions not specified)

Description The issue is related to an integer overflow in the Linux kernel, specifically in the vma to resize function in mm/mremap.c, which can be exploited by local users to cause a denial of service, resulting in a system crash. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise that can be exploited remotely, potentially leading to a disruption of protected information.

Recommendations For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue. For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Weakness Enumeration

CWE-20

CWE-189

Related Identifiers

BDU:2015-04607

CVE-2011-2496

DSA-2303-1

DSA-2310-1

RHSA-2011:1253

RHSA-2011:1350

RHSA-2011:1386

RHSA-2011_1350

RHSA-2011_1386

USN-1167-1

USN-1241-1

USN-1256-1

USN-1268-1

USN-1269-1

USN-1272-1

USN-1274-1

USN-1278-1

USN-1280-1

USN-1281-1

USN-1286-1

Affected Products

Linux Kernel

Red Hat

Kernel-Kdumppae

References · 28

• 🔥 https://github.com/torvalds/linux/commit/982134ba62618c2d69fbbbd166d0a11ee3b7e3d8 · Exploit
• https://ubuntu.com/security/notices/USN-1241-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1286-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1256-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2029.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1278-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2496 · Security Note
• https://ubuntu.com/security/notices/USN-1280-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1274-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://cve.org/CVERecord?id=CVE-2011-2496 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-1350.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1281-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1272-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1269-1 · Vendor Advisory