The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-pae-develUpgrade kernel-traceUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-sourceUpgrade kernel-ppc64Upgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-defaultUpgrade kernel-xenUpgrade kernel-default-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.24-31-openvzUpgrade linux-image-2.6.24-31-lpiaUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.24-31-lpiacompatUpgrade linux-image-2.6.24-31-serverUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.24-31-sparc64Upgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.24-31-sparc64-smpUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.24-31-powerpcUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.24-31-386Upgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.24-31-hppa32Upgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-31-rtUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.24-31-itaniumUpgrade linux-image-2.6.24-31-powerpc64-smpUpgrade linux-image-2.6.24-31-hppa64Upgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.24-31-virtualUpgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.24-31-xenUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.24-31-genericUpgrade linux-image-2.6.24-31-powerpc-smpUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-32-powerpc64-smpUpgrade linux-image-2.6.24-31-mckinleyUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.35-32-generic | Nov 8, 2024 | Jun 13, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub