PT-2012-1029 · Linux+3 · Linux Kernel+3
CVE-2011-4086
·
Publicado
2012-02-09
·
Atualizado
2023-02-13
CVSS v2.0
7.2
Alta
| Vetor | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.3.1
Linux (affected versions not specified)
Description
The issue is related to the journal unmap buffer function in the Linux kernel, which does not properly handle certain buffer head states. This can be exploited by local users to cause a denial of service, resulting in a system crash, by leveraging the presence of an ext4 filesystem that was mounted with a journal. Additionally, there are multiple vulnerabilities in the Linux package that can lead to breaches of confidentiality, integrity, and availability of protected information.
Recommendations
For Linux kernel versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for the multiple vulnerabilities in the Linux package.
Correção
DoS
Buffer Overflow
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Linux Kernel
Red Hat
Suse