CVE-2011-1163
- State
- Published
- Severity
- Not scored
- Published
- Apr 10, 2011
- Updated
- Aug 6, 2024
- Reserved
- Mar 3, 2011
Description
The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table parsing.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [mm-commits] 20110314 + fs-partitions-osfc-corrupted-osf-partition-table-can-cause-information-disclosure.patch added to -mm treemailing-list
- 46878vdb-entry
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1eafbfeb7bdf59cfe173304c76188f3fd5f1fd05
- https://bugzilla.redhat.com/show_bug.cgi?id=688021
- 8189third-party-advisory
- 1025225vdb-entry
- [oss-security] 20110315 Re: CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosuremailing-list
- RHSA-2011:0833vendor-advisory
- [oss-security] 20110315 CVE Request: kernel: fs/partitions: Corrupted OSF partition table can cause information disclosuremailing-list
- http://www.pre-cert.de/advisories/PRE-SA-2011-02.txt
- http://downloads.avaya.com/css/P8/documents/100145416
- 20110317 [PRE-SA-2011-02] Information disclosure vulnerability in the OSF partition handling code of the Linux kernelmailing-list
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
- SUSE-SU-2015:0812vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.