CVE-2011-1079

🗓️ 21 Jun 2012 23:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 114 Views

The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\0' character, which allows local users to obtain potentially sensitive information from kernel stack memory, or cause a denial of service (BUG and system crash), via a BNEPCONNADD command

Reporter	Title	Published	Views	Family All 142
Tenable Nessus	CentOS 5 : kernel (CESA-2011:0833)	29 Jun 201300:00	–	nessus
Tenable Nessus	Debian DSA-2240-1 : linux-2.6 - privilege escalation/denial of service/information leak	10 Jun 201100:00	–	nessus
Tenable Nessus	Debian DSA-2264-1 : linux-2.6 - privilege escalation/denial of service/information leak	20 Jun 201100:00	–	nessus
Tenable Nessus	Fedora 13 : kernel-2.6.34.9-69.fc13 (2011-6447)	22 Jun 201100:00	–	nessus
Tenable Nessus	Fedora 14 : kernel-2.6.35.13-91.fc14 (2011-6541)	10 May 201100:00	–	nessus
Tenable Nessus	MiracleLinux 3 : kernel-2.6.18-194.13.AXS3 (AXSA:2011-264:04)	14 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 3 : kernel-2.6.18-238.2.AXS3 (AXSA:2011-282:05)	14 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 4 : kernel-2.6.32-131.12.1.el6 (AXSA:2011-489:04)	14 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0264)	31 Dec 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0266)	31 Dec 201900:00	–	nessus

NVD

Node

linux linux_kernelRange≤2.6.38.8

linux linux_kernelMatch2.6.38

linux linux_kernelMatch2.6.38rc1

linux linux_kernelMatch2.6.38rc2

linux linux_kernelMatch2.6.38rc3

linux linux_kernelMatch2.6.38rc4

linux linux_kernelMatch2.6.38rc5

linux linux_kernelMatch2.6.38rc6

linux linux_kernelMatch2.6.38rc7

linux linux_kernelMatch2.6.38rc8

linux linux_kernelMatch2.6.38.1

linux linux_kernelMatch2.6.38.2

linux linux_kernelMatch2.6.38.3

linux linux_kernelMatch2.6.38.4

linux linux_kernelMatch2.6.38.5

linux linux_kernelMatch2.6.38.6

linux linux_kernelMatch2.6.38.7

Source	Link
ftp	www.ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39
github	www.github.com/torvalds/linux/commit/43629f8f5ea32a998d06d1bb41eefa0e821ff573
packetstormsecurity	www.packetstormsecurity.com/files/153799/Kernel-Live-Patch-Security-Notice-LSN-0053-1.html
downloads	www.downloads.avaya.com/css/P8/documents/100145416
rhn	www.rhn.redhat.com/errata/RHSA-2011-0833.html
git	www.git.kernel.org/
openwall	www.openwall.com/lists/oss-security/2011/03/01/10
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

29 Apr 2026 01:13Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25.4

EPSS0.00044

CWE-20