kernel: privilege escalation [LWN.net]

Package(s):

kernel

CVE #(s):

CVE-2011-1017

Created:

May 6, 2011

Updated:

August 12, 2011

Description:

From the Ubuntu advisory:

Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges.

Alerts:

Oracle	ELSA-2011-2037	2011-12-15
SUSE	SUSE-SU-2011:1058-1	2011-09-21
Ubuntu	USN-1212-1	2011-09-21
SUSE	SUSE-SA:2011:040	2011-09-20
Ubuntu	USN-1202-1	2011-09-13
SUSE	SUSE-SU-2011:0899-1	2011-08-12
SUSE	SUSE-SA:2011:034	2011-08-12
Ubuntu	USN-1187-1	2011-08-09
openSUSE	openSUSE-SU-2011:0861-1	2011-08-02
openSUSE	openSUSE-SU-2011:0860-1	2011-08-02
SUSE	SUSE-SU-2011:0832-1	2011-07-25
SUSE	SUSE-SA:2011:031	2011-07-25
Ubuntu	USN-1168-1	2011-07-15
Ubuntu	USN-1167-1	2011-07-13
Ubuntu	USN-1161-1	2011-07-13
Ubuntu	USN-1159-1	2011-07-13
Ubuntu	USN-1162-1	2011-06-29
Ubuntu	USN-1164-1	2011-07-06
SUSE	SUSE-SU-2011:0737-1	2011-07-05
SUSE	SUSE-SU-2011:0711-1	2011-06-29
Ubuntu	USN-1160-1	2011-06-28
Debian	DSA-2264-1	2011-06-18
Ubuntu	USN-1146-1	2011-06-09
SUSE	SUSE-SA:2011:026	2011-05-20
Ubuntu	USN-1111-1	2011-05-05

(Log in to post comments)

kernel: privilege escalation

Posted May 13, 2011 2:39 UTC (Fri) by BenHutchings (subscriber, #37955) [Link]

The original fix for this is incomplete:

http://linux.kernel.org/pipermail/stable-review/2011-May/...