CVE-2011-1163

The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
< 2.6.38
redhatenterprise_linux_desktop
5.0
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_eus
5.6
redhatenterprise_linux_server
5.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_aus
5.6
redhatenterprise_linux_workstation
5.0
redhatenterprise_linux_workstation
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
dapper
dne
hardy
Fixed 2.6.24-29.91
released
karmic
ignored
lucid
Fixed 2.6.32-33.64
released
maverick
Fixed 2.6.35-30.55
released
natty
Fixed 2.6.38-7.35
released
linux-ec2
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-317.32
released
maverick
ignored
natty
dne
linux-fsl-imx51
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.31-610.27
released
maverick
dne
natty
dne
linux-lts-backport-maverick
dapper
dne
hardy
dne
karmic
dne
lucid
Fixed 2.6.35-30.55~lucid1
released
maverick
dne
natty
dne
linux-lts-backport-natty
hardy
dne
lucid
not-affected
maverick
dne
natty
dne
linux-mvl-dove
dapper
dne
hardy
dne
karmic
ignored
lucid
Fixed 2.6.32-217.34
released
maverick
Fixed 2.6.32-417.34
released
natty
dne
linux-source-2.6.15
dapper
ignored
hardy
dne
karmic
dne
lucid
dne
maverick
dne
natty
dne
linux-ti-omap4
dapper
dne
hardy
dne
karmic
dne
lucid
dne
maverick
Fixed 2.6.35-903.23
released
natty
Fixed 2.6.38-1205.6
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kernel
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-bootwrapper
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-debug
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-debug-devel
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-devel
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-doc
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-firmware
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-headers
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-kdump
RHEL 6
0:2.6.32-71.31.1.el6
fixed
kernel-kdump-devel
RHEL 6
0:2.6.32-71.31.1.el6
fixed
perf
RHEL 6
0:2.6.32-71.31.1.el6
fixed
Common Weakness Enumeration
References
http://downloads.avaya.com/css/P8/documents/100145416
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://openwall.com/lists/oss-security/2011/03/15/14
http://openwall.com/lists/oss-security/2011/03/15/9
http://rhn.redhat.com/errata/RHSA-2011-0833.html
http://securityreason.com/securityalert/8189
http://securitytracker.com/id?1025225
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt
http://www.securityfocus.com/archive/1/517050
http://www.securityfocus.com/bid/46878
http://www.spinics.net/lists/mm-commits/msg82737.html
https://bugzilla.redhat.com/show_bug.cgi?id=688021
http://downloads.avaya.com/css/P8/documents/100145416
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html
http://openwall.com/lists/oss-security/2011/03/15/14
http://openwall.com/lists/oss-security/2011/03/15/9
http://rhn.redhat.com/errata/RHSA-2011-0833.html
http://securityreason.com/securityalert/8189
http://securitytracker.com/id?1025225
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt
http://www.securityfocus.com/archive/1/517050
http://www.securityfocus.com/bid/46878
http://www.spinics.net/lists/mm-commits/msg82737.html
https://bugzilla.redhat.com/show_bug.cgi?id=688021