CVE-2011-2484

EUVD-2011-2472
The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 2.6.39.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
hardy
Fixed 2.6.24-29.92
released
lucid
Fixed 2.6.32-34.77
released
maverick
Fixed 2.6.35-30.57
released
natty
Fixed 2.6.38-11.47
released
oneiric
not-affected
precise
not-affected
quantal
not-affected
saucy
not-affected
trusty
not-affected
linux-ec2
hardy
dne
lucid
Fixed 2.6.32-318.38
released
maverick
ignored
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-flo
lucid
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-fsl-imx51
hardy
dne
lucid
Fixed 2.6.31-610.27
released
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-goldfish
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
dne
linux-grouper
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
dne
linux-lts-backport-maverick
hardy
dne
lucid
Fixed 2.6.35-30.57~lucid1
released
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-lts-backport-natty
hardy
dne
lucid
Fixed 2.6.38-11.49~lucid1
released
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-lts-backport-oneiric
hardy
dne
lucid
not-affected
maverick
dne
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-maguro
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
dne
linux-mako
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
dne
linux-manta
lucid
dne
precise
dne
quantal
dne
saucy
ignored
trusty
dne
linux-mvl-dove
hardy
dne
lucid
Fixed 2.6.32-218.35
released
maverick
Fixed 2.6.32-418.35
released
natty
dne
oneiric
dne
precise
dne
quantal
dne
saucy
dne
trusty
dne
linux-ti-omap4
hardy
dne
lucid
dne
maverick
Fixed 2.6.35-903.23
released
natty
Fixed 2.6.38-1209.15
released
oneiric
not-affected
precise
not-affected
quantal
not-affected
saucy
not-affected
trusty
dne
Common Weakness Enumeration