Name: CVE-2011-1162: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2012-01-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2011-1162, CWE-200, CVSS 5.5, EPSS 0.00119

The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command.

CVSS Details

CVSS 3.1 Base Score: 5.5

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kernel-devel	Dec 1, 2016	Jan 27, 2012
Oracle_linux	—	Upgrade kernel-uekUpgrade kernel	Oct 16, 2024	Jan 27, 2012
Ubuntu	—	Upgrade linux-image-2.6.32-37-virtualUpgrade linux-image-2.6.24-30-powerpcUpgrade linux-image-2.6.38-13-genericUpgrade linux-image-3.0.0-1206-omap4Upgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-30-lpiaUpgrade linux-image-2.6.24-30-386Upgrade linux-image-2.6.32-37-genericUpgrade linux-image-3.0.0-13-generic-paeUpgrade linux-image-2.6.32-37-sparc64Upgrade linux-image-2.6.24-30-powerpc64-smpUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.38-13-powerpc-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.38-13-virtualUpgrade linux-image-2.6.24-30-xenUpgrade linux-image-2.6.38-13-versatileUpgrade linux-image-2.6.35-32-genericUpgrade linux-image-3.0.0-13-powerpc64-smpUpgrade linux-image-2.6.32-37-preemptUpgrade linux-image-2.6.24-30-rtUpgrade linux-image-2.6.24-30-openvzUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.38-13-serverUpgrade linux-image-3.0.0-13-powerpc-smpUpgrade linux-image-2.6.24-30-sparc64-smpUpgrade linux-image-2.6.24-30-itaniumUpgrade linux-image-2.6.32-37-powerpcUpgrade linux-image-2.6.32-37-sparc64-smpUpgrade linux-image-2.6.32-37-lpiaUpgrade linux-image-2.6.32-37-versatileUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.24-30-lpiacompatUpgrade linux-image-2.6.38-13-omapUpgrade linux-image-2.6.38-13-generic-paeUpgrade linux-image-2.6.32-421-doveUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.32-37-powerpc64-smpUpgrade linux-image-2.6.24-30-hppa32Upgrade linux-image-2.6.32-37-generic-paeUpgrade linux-image-2.6.24-30-hppa64Upgrade linux-image-2.6.32-341-ec2Upgrade linux-image-2.6.24-30-sparc64Upgrade linux-image-2.6.32-37-386Upgrade linux-image-2.6.38-13-powerpcUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-3.0.0-13-genericUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-3.0.0-13-serverUpgrade linux-image-3.0.0-13-powerpcUpgrade linux-image-2.6.24-30-powerpc-smpUpgrade linux-image-2.6.24-30-mckinleyUpgrade linux-image-2.6.32-37-powerpc-smpUpgrade linux-image-3.0.0-13-omapUpgrade linux-image-3.0.0-13-virtualUpgrade linux-image-2.6.24-30-virtualUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.24-30-serverUpgrade linux-image-2.6.38-13-powerpc64-smpUpgrade linux-image-2.6.32-37-serverUpgrade linux-image-2.6.24-30-genericUpgrade linux-image-2.6.32-37-ia64	Nov 8, 2024	Jan 27, 2012

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence