PT-2011-3244 · Linux+1 · Linux Kernel+1

Dave Jones · Published 2011-05-09 · Updated 2023-02-13 · CVE-2011-1598

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39-rc6

Description The issue is related to the bcm release function in the Linux kernel, which does not properly validate a socket data structure. This can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference, or possibly have other unspecified impacts via a crafted release operation.

Recommendations For Linux kernel versions prior to 2.6.39-rc6, update to version 2.6.39-rc6 or later to resolve the issue.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2011-1598

DSA-2240-1

DSA-2264-1

RHSA-2011:0836

RHSA-2011:1253

RHSA-2011_0836

Affected Products

Linux Kernel

Red Hat

References · 26

• https://nvd.nist.gov/vuln/detail/CVE-2011-1598 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-0836.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-2019.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2011-1770 · Note
• http://openwall.com/lists/oss-security/2011/04/20/7 · Note
• http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.39-rc6 · Note
• https://access.redhat.com/errata/RHSA-2011:0836 · Note
• http://permalink.gmane.org/gmane.linux.network/192898 · Note
• http://securityfocus.com/bid/47503 · Note
• http://openwall.com/lists/oss-security/2011/04/22/2 · Note
• http://exploit-db.com/exploits/15619 · Note
• https://access.redhat.com/security/cve/CVE-2011-1748 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=698057 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=703016 · Note
• http://openwall.com/lists/oss-security/2011/04/20/6 · Note