PT-2012-1928 · Linux+2 · Linux Kernel+2

Maynard Johnson · CVE-2011-4611 · Published 2012-03-06 · Updated 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.39 on powerpc platforms

Description The issue is related to an integer overflow in the perf event interrupt function, which can cause a denial of service due to an unhandled performance monitor exception. This occurs when certain outcomes of performance events are triggered.

Recommendations For Linux kernel versions prior to 2.6.39 on powerpc platforms, update to version 2.6.39 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CESA-2012_0350

CVE-2011-4611

DSA-2389-1

RHSA-2012:0350

RHSA-2012_0350

Affected Products

Centos

Linux Kernel

Red Hat

References · 7

• https://github.com/torvalds/linux/commit/0837e3242c73566fc1c0196b4ec61779c25ffc93 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-4611 · Security Note
• https://linux.oracle.com/errata/ELSA-2012-0350.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/12/15/2 · Note
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0837e3242c73566fc1c0196b4ec61779c25ffc93 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=767914 · Note