kernel: privilege escalation

Package(s):

kernel

CVE #(s):

CVE-2011-1017

Created:

May 6, 2011

Updated:

August 12, 2011

Description:

From the Ubuntu advisory:

Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges.

Alerts:

Oracle	ELSA-2011-2037	enterprise kernel	2011-12-15
SUSE	SUSE-SU-2011:1058-1	kernel	2011-09-21
Ubuntu	USN-1212-1	linux-ti-omap4	2011-09-21
SUSE	SUSE-SA:2011:040	kernel	2011-09-20
Ubuntu	USN-1202-1	linux-ti-omap4	2011-09-13
SUSE	SUSE-SU-2011:0899-1	kernel	2011-08-12
SUSE	SUSE-SA:2011:034	kernel	2011-08-12
Ubuntu	USN-1187-1	kernel	2011-08-09
openSUSE	openSUSE-SU-2011:0861-1	kernel	2011-08-02
openSUSE	openSUSE-SU-2011:0860-1	kernel	2011-08-02
SUSE	SUSE-SU-2011:0832-1	kernel	2011-07-25
SUSE	SUSE-SA:2011:031	kernel	2011-07-25
Ubuntu	USN-1168-1	linux	2011-07-15
Ubuntu	USN-1167-1	linux	2011-07-13
Ubuntu	USN-1161-1	linux-ec2	2011-07-13
Ubuntu	USN-1159-1	linux-mvl-dove	2011-07-13
Ubuntu	USN-1162-1	linux-mvl-dove	2011-06-29
Ubuntu	USN-1164-1	linux-fsl-imx51	2011-07-06
SUSE	SUSE-SU-2011:0737-1	kernel	2011-07-05
SUSE	SUSE-SU-2011:0711-1	kernel	2011-06-29
Ubuntu	USN-1160-1	kernel	2011-06-28
Debian	DSA-2264-1	linux-2.6	2011-06-18
Ubuntu	USN-1146-1	kernel	2011-06-09
SUSE	SUSE-SA:2011:026	kernel	2011-05-20
Ubuntu	USN-1111-1	linux-source-2.6.15	2011-05-05

kernel: privilege escalation

Posted May 13, 2011 2:39 UTC (Fri) by BenHutchings (subscriber, #37955) [Link]

The original fix for this is incomplete:

http://linux.kernel.org/pipermail/stable-review/2011-May/...