The ldm_frag_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-initial fragments, which might allow local users to conduct buffer overflow attacks, and gain privileges or obtain sensitive information, via a crafted LDM partition table. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1017.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-ppc64-baseUpgrade kernel-traceUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-default-develUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade kernel-paeUpgrade kernel-default | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-34-386Upgrade linux-image-2.6.24-31-hppa32Upgrade linux-image-2.6.32-34-preemptUpgrade linux-image-2.6.38-11-serverUpgrade linux-image-2.6.32-34-genericUpgrade linux-image-2.6.32-34-versatileUpgrade linux-image-2.6.32-34-powerpc-smpUpgrade linux-image-2.6.38-11-virtualUpgrade linux-image-2.6.35-32-virtualUpgrade linux-image-2.6.24-31-openvzUpgrade linux-image-2.6.38-12-generic-paeUpgrade linux-image-2.6.32-34-sparc64-smpUpgrade linux-image-2.6.38-11-omapUpgrade linux-image-2.6.32-418-doveUpgrade linux-image-2.6.38-11-powerpcUpgrade linux-image-2.6.24-31-sparc64Upgrade linux-image-2.6.35-32-versatileUpgrade linux-image-2.6.24-31-lpiacompatUpgrade linux-image-2.6.24-31-powerpcUpgrade linux-image-2.6.24-31-386Upgrade linux-image-2.6.32-34-sparc64Upgrade linux-image-2.6.24-31-serverUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-2.6.35-32-powerpc-smpUpgrade linux-image-2.6.32-34-powerpc64-smpUpgrade linux-image-2.6.38-12-virtualUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-31-sparc64-smpUpgrade linux-image-2.6.24-31-rtUpgrade linux-image-2.6.38-11-powerpc-smpUpgrade linux-image-2.6.35-32-omapUpgrade linux-image-2.6.32-34-powerpcUpgrade linux-image-2.6.35-32-generic-paeUpgrade linux-image-2.6.35-32-serverUpgrade linux-image-2.6.31-612-imx51Upgrade linux-image-2.6.38-12-genericUpgrade linux-image-2.6.24-31-lpiaUpgrade linux-image-2.6.24-31-itaniumUpgrade linux-image-2.6.24-31-virtualUpgrade linux-image-2.6.24-31-genericUpgrade linux-image-2.6.24-31-powerpc-smpUpgrade linux-image-2.6.24-31-xenUpgrade linux-image-2.6.38-11-versatileUpgrade linux-image-2.6.24-31-hppa64Upgrade linux-image-2.6.32-34-virtualUpgrade linux-image-2.6.24-31-powerpc64-smpUpgrade linux-image-2.6.32-34-serverUpgrade linux-image-2.6.38-12-serverUpgrade linux-image-2.6.38-11-genericUpgrade linux-image-2.6.38-11-generic-paeUpgrade linux-image-2.6.38-11-powerpc64-smpUpgrade linux-image-2.6.32-318-ec2Upgrade linux-image-2.6.32-218-doveUpgrade linux-image-2.6.35-32-powerpcUpgrade linux-image-2.6.32-34-ia64Upgrade linux-image-2.6.35-32-genericUpgrade linux-image-2.6.24-31-mckinleyUpgrade linux-image-2.6.32-34-generic-paeUpgrade linux-image-2.6.32-34-lpiaUpgrade linux-image-2.6.35-32-powerpc64-smp | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub