PT-2020-7103 · Linux · Linux Kernel

Published 2020-02-20 · Updated 2020-02-25 · CVE-2011-2498

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.3.36 through 2.6.38

Description The issue allows local unprivileged users to cause a denial of service by consuming memory, which is achieved by triggering the creation of PTE pages.

Recommendations For Linux kernel versions 2.3.36 through 2.6.38, update to version 2.6.39 or later to resolve the issue.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2011-2498

Affected Products

Linux Kernel

References · 7

• https://security-tracker.debian.org/tracker/CVE-2011-2498 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2498 · Security Note
• https://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-2498.html · Note
• https://rapid7.com/db/vulnerabilities/ubuntu-USN-1383-1 · Note
• http://marc.info/?l=oss-security&m=130923704824984&w=2 · Note
• https://t.me/cibsecurity/9950 · Telegram Post
• https://usn.ubuntu.com/1167-1 · Note