PT-2011-2804 · Linux+1 · Linux Kernel+1

Eugene Teo · Published 2011-02-23 · Updated 2023-02-13 · CVE-2011-0999

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc5

Description The issue is related to the creation of transparent huge pages (THP) during the existence of a temporary stack for an exec system call. This allows local users to cause a denial of service due to memory consumption or possibly have other unspecified impacts via a crafted application.

Recommendations For Linux kernel versions prior to 2.6.38-rc5, update to version 2.6.38-rc5 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2011-0999

RHSA-2011:0542

RHSA-2011:0883

RHSA-2011_0542

RHSA-2011_0883

Affected Products

Linux Kernel

Red Hat

References · 33

• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0542.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0999 · Security Note
• http://openwall.com/lists/oss-security/2011/02/17/6 · Patch
• https://bdu.fstec.ru/vul/2015-04343 · Security Note
• http://openwall.com/lists/oss-security/2011/02/17/3 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=678209 · Patch
• https://bdu.fstec.ru/vul/2015-04342 · Security Note
• https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c · Note
• https://github.com/torvalds/linux/commit/6094628bfd94323fc1cea05ec2c6affd98c18f7f · Note
• https://access.redhat.com/security/cve/CVE-2011-1494 · Note
• https://access.redhat.com/security/cve/CVE-2010-4251 · Note
• https://access.redhat.com/security/cve/CVE-2011-1171 · Note
• http://securityfocus.com/bid/46442 · Note