PT-2011-1083
CVE-2011-2496
·
Published
2011-03-01
·
Updated
2023-02-13
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.39
kernel-kdumppae (affected versions not specified)
Description
The issue is related to an integer overflow in the Linux kernel, specifically in the vma to resize function in mm/mremap.c, which can be exploited by local users to cause a denial of service, resulting in a system crash. Additionally, there are multiple vulnerabilities in the kernel-kdumppae package of SUSE Linux Enterprise that can be exploited remotely, potentially leading to a disruption of protected information.
Recommendations
For Linux kernel versions prior to 2.6.39, update to version 2.6.39 or later to resolve the issue.
For kernel-kdumppae, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾