PT-2012-1580 · Linux · Linux Kernel

Dan Rosenberg · Published 2012-05-24 · Updated 2024-08-07 · CVE-2011-2906

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.1

Description The issue is related to an integer signedness error in the pmcraid ioctl passthrough function, which might allow local users to cause a denial of service, potentially leading to memory consumption or memory corruption. This can be achieved via a negative size value in an ioctl call. It is noted that this may only be a vulnerability in unusual environments where a privileged program can obtain the required file descriptor.

Recommendations For Linux kernel versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the pmcraid ioctl passthrough function to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2011-2906

Affected Products

Linux Kernel

References · 6

• 🔥 https://github.com/torvalds/linux/commit/b5b515445f4f5a905c5dd27e6e682868ccd6c09d · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2906 · Security Note
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/08/09/8 · Patch
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b5b515445f4f5a905c5dd27e6e682868ccd6c09d · Note
• https://t.me/cvenotify/89536 · Telegram Post