CVE-2011-0711: Infoleak
Last updated 24 July 2024
Other sources
The FSGEOMETRYV1 ioctl (and its compat equivalent) calls out to xfsfsgeometry() with a version number of 3. This code path does not fill in the logsunit member of the passed xfsfsopgeomt, leading to the leaking of four bytes of uninitialized stack data to potentially unprivileged callers. Since all other members are filled in all code paths and there are no padding bytes in this structure, it's safe to avoid an expensive memset() in favor of just clearing this one field.
https://patchwork.kernel.org/patch/546491/
Acknowledgements:
Red Hat would like to thank Dan Rosenberg for reporting this issue.
— Red Hat
The xfsfsgeometry function in fs/xfs/xfsfsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an FSGEOMETRYV1 ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0711?
CVE-2011-0711 is classified as a moderate severity vulnerability due to exposure of uninitialized stack data.
How do I fix CVE-2011-0711?
To mitigate CVE-2011-0711, update your Linux kernel to a version higher than 2.6.38.
Which systems are affected by CVE-2011-0711?
CVE-2011-0711 affects Linux kernel versions up to and including 2.6.38, as well as certain Red Hat Enterprise Linux versions.
What type of issue is CVE-2011-0711?
CVE-2011-0711 is an uninitialized data exposure vulnerability caused by inadequate handling in the FSGEOMETRY_V1 ioctl.
Can CVE-2011-0711 lead to further exploits?
Yes, CVE-2011-0711 could potentially be leveraged in further exploits as it allows the leaking of sensitive information.