Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0999
HistoryFeb 23, 2011 - 12:00 a.m.

CVE-2011-0999

2011-02-2300:00:00
ubuntu.com
ubuntu.com
8

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%

mm/huge_memory.c in the Linux kernel before 2.6.38-rc5 does not prevent
creation of a transparent huge page (THP) during the existence of a
temporary stack for an exec system call, which allows local users to cause
a denial of service (memory consumption) or possibly have unspecified other
impact via a crafted application.

Notes

Author Note
jdstrand THP first introduced in 2009 (http://article.gmane.org/gmane.linux.kernel.mm/40182), so Ubuntu 6.06 not affected
apw THP was actually introduced in 2.6.38~rc1
OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchlinux< 2.6.38-4.31UNKNOWN
ubuntu11.04noarchlinux-ti-omap4< 2.6.38-1203.4UNKNOWN

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.2%