PT-2011-2420 · Linux+1 · Linux Kernel+1

Tavis Ormandy · Published 2011-02-02 · Updated 2023-02-13 · CVE-2011-0521

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc2

Description The issue is related to the dvb ca ioctl function in the Linux kernel, which does not properly check the sign of a certain integer field. This oversight allows local users to potentially cause a denial of service, resulting in memory corruption, or possibly have other unspecified impacts by providing a negative value.

Recommendations For versions prior to 2.6.38-rc2, update to version 2.6.38-rc2 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0521

DSA-2153-1

RHSA-2011:0263

RHSA-2011:0330

RHSA-2011:0421

RHSA-2011:0429

RHSA-2011_0263

RHSA-2011_0421

RHSA-2011_0429

Affected Products

Linux Kernel

Red Hat

References · 36

• http://openwall.com/lists/oss-security/2011/01/25/2 · Patch
• https://linux.oracle.com/errata/ELSA-2011-2014.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0421.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0521 · Security Note
• http://openwall.com/lists/oss-security/2011/01/24/2 · Patch
• https://bdu.fstec.ru/vul/2015-05302 · Security Note
• https://github.com/torvalds/linux/commit/0a54917c3fc295cb61f3fb52373c173fd3b69f48 · Note
• https://access.redhat.com/security/cve/CVE-2010-4527 · Note
• https://access.redhat.com/security/cve/CVE-2010-4526 · Note
• https://access.redhat.com/security/cve/CVE-2011-0716 · Note
• https://access.redhat.com/security/cve/CVE-2011-0521 · Note
• https://access.redhat.com/security/cve/CVE-2010-3296 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb26a24ee9706473f31d34cc259f4dcf45cd0644 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64988 · Note