PT-2012-1932 · Linux+2 · Linux Kernel+2

Bjoern B. Brandenburg · Published 2011-12-22 · Updated 2023-02-13 · CVE-2011-4621

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.37

Description The issue is related to a certain clock-update optimization that is not properly implemented, allowing local users to cause a denial of service, resulting in a system hang. This can be achieved by executing code in a loop within an application.

Recommendations For versions prior to 2.6.37, update to version 2.6.37 or later to resolve the issue.

Exploit

Fix

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CESA-2011_1849

CVE-2011-4621

RHSA-2011:1849

RHSA-2011_1849

Affected Products

Centos

Linux Kernel

Red Hat

References · 18

• 🔥 http://openwall.com/lists/oss-security/2011/12/21/6 · Exploit
• https://github.com/torvalds/linux/commit/f26f9aff6aaf67e9a430d16c266f91b13a5bff64 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4621 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-4621 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=769711 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4127 · Security Note
• https://github.com/torvalds/linux/commit/ec8013beddd717d1740cfefb1a9b900deef85462 · Note
• https://github.com/torvalds/linux/commit/0bfc96cb77224736dfa35c3c555d37b3646ef35e · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f26f9aff6aaf67e9a430d16c266f91b13a5bff64 · Note
• https://lists.centos.org/pipermail/centos-announce/2011-December/055277.html · Note
• http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.37 · Note
• https://access.redhat.com/errata/RHSA-2011:1849 · Note
• https://lists.centos.org/pipermail/centos-announce/2011-December/030396.html · Note
• https://access.redhat.com/security/cve/CVE-2011-4127 · Note
• https://access.redhat.com/security/cve/CVE-2011-4621 · Note