PT-2011-2914 · Linux+2 · Linux Kernel+2

Published 2011-04-10 · Updated 2023-02-13 · CVE-2011-1163

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.38

Description The issue is related to the osf partition function in the Linux kernel, which does not properly handle an invalid number of partitions. This might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.

Recommendations For versions prior to 2.6.38, update to version 2.6.38 or later to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1163

DSA-2240-1

DSA-2264-1

RHSA-2011:0500

RHSA-2011:0542

RHSA-2011:0833

RHSA-2011:0883

RHSA-2011_0542

RHSA-2011_0833

RHSA-2011_0883

Affected Products

Linux Kernel

Red Hat

Suse

References · 50

• https://nvd.nist.gov/vuln/detail/CVE-2011-1163 · Security Note
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• http://spinics.net/lists/mm-commits/msg82737.html · Patch
• https://linux.oracle.com/errata/ELSA-2011-0542.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04341 · Security Note
• http://rhn.redhat.com/errata/RHSA-2011-0833.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2016.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/03/15/9 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=688021 · Patch
• https://bdu.fstec.ru/vul/2015-04343 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/03/15/14 · Patch
• https://bdu.fstec.ru/vul/2015-04342 · Security Note
• https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c · Note
• https://github.com/torvalds/linux/commit/6094628bfd94323fc1cea05ec2c6affd98c18f7f · Note