PT-2011-2813 · Linux · Linux Kernel

Timo Warns · Published 2011-03-01 · Updated 2023-02-13 · CVE-2011-1012

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38-rc6-git6

Description The issue is related to the ldm parse vmdb function in the Linux kernel, which does not validate the VBLK size value in the VMDB structure in an LDM partition table. This allows local users to cause a denial of service, resulting in a divide-by-zero error and OOPS, via a crafted partition table.

Recommendations For Linux kernel versions prior to 2.6.38-rc6-git6, update to version 2.6.38-rc6-git6 or later to resolve the issue.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2011-1012

DSA-2264-1

Affected Products

Linux Kernel

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2011-1012 · Security Note
• http://openwall.com/lists/oss-security/2011/02/23/4 · Patch
• http://openwall.com/lists/oss-security/2011/02/23/21 · Patch
• http://ubuntu.com/usn/USN-1146-1 · Vendor Advisory
• http://spinics.net/lists/mm-commits/msg82429.html · Patch
• http://securityfocus.com/archive/1/516615/100/0/threaded · Note
• http://kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.38-rc6-git6.log · Note
• http://securityreason.com/securityalert/8115 · Note
• http://securitytracker.com/id?1025127 · Note
• http://pre-cert.de/advisories/PRE-SA-2011-01.txt · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=294f6cf48666825d23c9372ef37631232746e40d · Note
• http://securityfocus.com/bid/46512 · Note