PT-2011-2576 · Linux+1 · Linux Kernel+1

Dan Rosenberg · Published 2011-03-01 · Updated 2024-06-15 · CVE-2011-0711

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc6-git3

Description The issue allows local users to obtain potentially sensitive information from kernel stack memory. This is due to the xfs fs geometry function in fs/xfs/xfs fsops.c not initializing a certain structure member, which can be exploited via an FSGEOMETRY V1 ioctl call.

Recommendations For Linux kernel versions prior to 2.6.38-rc6-git3, update to version 2.6.38-rc6-git3 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-0711

DSA-2240-1

DSA-2264-1

OPENSUSE-SU-2024:10128-1

RHSA-2011:0498

RHSA-2011:0500

RHSA-2011:0927

RHSA-2011_0498

RHSA-2011_0927

Affected Products

Linux Kernel

Red Hat

References · 136

• https://osv.dev/vulnerability/openSUSE-SU-2024:10128-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00069 · Security Note
• https://bdu.fstec.ru/vul/2015-04343 · Security Note
• https://patchwork.kernel.org/patch/555461 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04342 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=677260 · Patch
• http://rhn.redhat.com/errata/RHSA-2011-0927.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0711 · Security Note
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://bdu.fstec.ru/vul/2015-04341 · Security Note
• https://bdu.fstec.ru/vul/2015-04359 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0498.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2015.html · Vendor Advisory
• https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c · Note
• https://github.com/torvalds/linux/commit/8909c9ad8ff03611c9c96c9a92656213e4bb495b · Note